Rider

rider

Vendor: Jetbrains • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-64457 1Jetbrains 3Dottrace ResharperRider Jan 12, 2026 Nov 10, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
CVE-2025-43016 1Jetbrains 1Rider Oct 1, 2025 Apr 25, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session
CVE-2025-23385 1Jetbrains 4Dottrace Etw Host ServiceResharper+1 more Jan 12, 2026 Jan 28, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation v...Show more In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possibleShow less
CVE-2024-37051 1Jetbrains 13Aqua ClionDatagrip+10 more Nov 21, 2024 Jun 10, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,...Show more GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4Show less
CVE-2024-24939 1Jetbrains 1Rider Nov 21, 2024 Feb 6, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible
CVE-2022-37396 1Jetbrains 1Rider Nov 21, 2024 Aug 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
CVE-2020-7906 1Jetbrains 1Rider Nov 21, 2024 Jan 30, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.
CVE-2019-14960 1Jetbrains 1Rider Nov 21, 2024 Oct 1, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.