Every CVE whose affected-product data names Jetbrains Rider, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (8)
CVE-2024-37051 — CVSS 9.3 (critical): GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7…
CVE-2019-14960 — CVSS 7.8 (high): JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.
CVE-2025-23385 — CVSS 7.8 (high): In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4…
CVE-2020-7906 — CVSS 7.5 (high): In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was…
CVE-2025-43016 — CVSS 5.4 (medium): In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session
CVE-2025-64457 — CVSS 4.2 (medium): In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
CVE-2022-37396 — CVSS 4.1 (medium): In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
CVE-2024-24939 — CVSS 3.3 (low): In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible