GCVE - cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jetbrains (`b1b7db7a-bd16-5477-8e89-fb64c5636fcd`)
Product	Rider (`39fd50a9-56dc-55af-91ba-f96338c7ea94`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-64457`	vulnerable	2026-06-03 15:09:39.192122	Details available MEDIUM (4.2) In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition Published: 2025-11-10T13:28:23.970Z Updated: 2026-02-26T17:47:04.857Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-43016`	vulnerable	2026-06-03 15:01:16.488871	Details available MEDIUM (5.4) In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session Published: 2025-04-25T14:32:32.399Z Updated: 2025-04-25T15:27:30.767Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23385`	vulnerable	2026-06-03 14:59:42.423649	Details available HIGH (7.8) In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible Published: 2025-01-28T16:01:55.084Z Updated: 2025-01-28T16:26:10.127Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37051`	vulnerable	2026-06-03 14:56:05.587702	Details available CRITICAL (9.3) GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4 Published: 2024-06-10T15:58:06.021Z Updated: 2025-02-13T17:52:58.741Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/ https://security.netapp.com/advisory/ntap-20240705-0004/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24939`	vulnerable	2026-06-03 14:55:06.152864	Details available LOW (3.3) In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible Published: 2024-02-06T09:21:29.788Z Updated: 2024-08-01T23:36:20.565Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-37396`	vulnerable	2026-06-03 14:47:47.309922	Details available MEDIUM (4.1) In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution Published: 2022-08-03T15:40:10.000Z Updated: 2024-08-03T10:29:21.005Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29821`	vulnerable	2026-06-03 14:46:58.937930	Details available MEDIUM (6.9) In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible Published: 2022-04-28T09:55:31.000Z Updated: 2024-08-03T06:33:42.841Z Open on db.gcve.eu Reference links https://www.jetbrains.com/privacy-security/issues-fixed/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14960`	vulnerable	2026-06-03 14:39:46.895106	Details available JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file. Published: 2019-10-01T15:51:55.000Z Updated: 2024-08-05T00:34:52.826Z Open on db.gcve.eu Reference links https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.