CVE-2025-64457

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-64457
In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

4.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.1 / Impact : 2.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*
History

12 Jan 2026, 21:56

Type Values Removed Values Added
CPE cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*
First Time Jetbrains
Jetbrains rider
Jetbrains resharper
Jetbrains dottrace
CWE CWE-362
References () https://www.jetbrains.com/privacy-security/issues-fixed/ - () https://www.jetbrains.com/privacy-security/issues-fixed/ - Vendor Advisory

19 Dec 2025, 10:15

Type Values Removed Values Added
CWE CWE-367
References
  • () https://www.jetbrains.com/privacy-security/issues-fixed/ -
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.2
Summary (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority while details are being clarified. A corrected record will be published once verification is complete. (en) In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

11 Nov 2025, 13:15

Type Values Removed Values Added
CWE CWE-367
Summary (en) In JetBrains dotTrace before 2025.2.5 local privilege escalation possible via race condition (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority while details are being clarified. A corrected record will be published once verification is complete.
References
  • {'url': 'https://www.jetbrains.com/privacy-security/issues-fixed/', 'source': 'cve@jetbrains.com'}
CVSS v2 : unknown
v3 : 4.2 		v2 : unknown
v3 : unknown

10 Nov 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-10 14:15

Updated : 2026-01-12 21:56

NVD link : CVE-2025-64457

Mitre link : CVE-2025-64457

CVE.ORG link : CVE-2025-64457

JSON object : View

Products Affected

jetbrains

  • dottrace
  • resharper
  • rider
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')