Approved changes feed: RSS · Atom
cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jetbrains (b1b7db7a-bd16-5477-8e89-fb64c5636fcd) |
|---|---|
| Product | Rider (39fd50a9-56dc-55af-91ba-f96338c7ea94) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64457 |
vulnerable | 2026-06-08 07:39:19.727627 |
Details available
MEDIUM (4.2)
In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
Published: 2025-11-10T13:28:23.970Z
Updated: 2026-02-26T17:47:04.857Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43016 |
vulnerable | 2026-06-08 07:25:08.543622 |
Details available
MEDIUM (5.4)
In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session
Published: 2025-04-25T14:32:32.399Z
Updated: 2025-04-25T15:27:30.767Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23385 |
vulnerable | 2026-06-08 07:10:55.655174 |
Details available
HIGH (7.8)
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
Published: 2025-01-28T16:01:55.084Z
Updated: 2025-01-28T16:26:10.127Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37051 |
vulnerable | 2026-06-08 06:39:46.368510 |
Details available
CRITICAL (9.3)
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4
Published: 2024-06-10T15:58:06.021Z
Updated: 2025-02-13T17:52:58.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24939 |
vulnerable | 2026-06-08 06:29:42.090830 |
Details available
LOW (3.3)
In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible
Published: 2024-02-06T09:21:29.788Z
Updated: 2024-08-01T23:36:20.565Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37396 |
vulnerable | 2026-06-08 05:47:12.794326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29821 |
vulnerable | 2026-06-08 05:42:48.865436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14960 |
vulnerable | 2026-06-08 05:12:56.470568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.