CVE-2025-64457CWE-362CWE-367

CVE-2025-64457

Medium · published November 10, 2025

CVSS v3.1
4.2
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00097 · 0.7th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-11-10T19:15Z
Affected products (3)
ProductVersionsFixed in
jetbrains/dottrace< 2025.2.52025.2.5
jetbrains/resharper< 2025.2.52025.2.5
jetbrains/rider< 2025.2.52025.2.5
References (1)
https://www.jetbrains.com/privacy-security/issues-fixed/ · [email protected]
EPSS history
Timeline
  • 10 NOV 13:28Z
    In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
    cvelistv5