CVE-2025-64457

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-64457

4.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.1 / Impact : 2.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

I

n JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

References
Link Resource
https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*
History

12 Jan 2026, 21:56

Type Values Removed Values Added
First Time Jetbrains resharper
Jetbrains rider
Jetbrains
Jetbrains dottrace
References () https://www.jetbrains.com/privacy-security/issues-fixed/ - () https://www.jetbrains.com/privacy-security/issues-fixed/ - Vendor Advisory
CPE cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*
cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*
CWE CWE-362

19 Dec 2025, 18:00

Type Values Removed Values Added
References
  • () https://www.jetbrains.com/privacy-security/issues-fixed/ -
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.2
CWE CWE-367
Summary (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority while details are being clarified. A corrected record will be published once verification is complete. (en) In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

11 Nov 2025, 13:15

Type Values Removed Values Added
CWE CWE-367
CVSS v2 : unknown
v3 : 4.2 		v2 : unknown
v3 : unknown
References
  • {'url': 'https://www.jetbrains.com/privacy-security/issues-fixed/', 'source': '[email protected]'}
Summary (en) In JetBrains dotTrace before 2025.2.5 local privilege escalation possible via race condition (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority while details are being clarified. A corrected record will be published once verification is complete.

10 Nov 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-10 14:15

Updated : 2026-01-12 21:56

NVD link : CVE-2025-64457

Mitre link : CVE-2025-64457

CVE.ORG link : CVE-2025-64457

JSON object : View

Products Affected

jetbrains

CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')