JetBrains

Records788All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical84CVSS 9.0–10.0

CVSS high249CVSS 7.0–8.9

Exploited now

JetBrains records in CISA KEV

TI-2026-45031 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-08-05 TI-2024-18054 JetBrains TeamCity Relative Path Traversal Vulnerability CRITICAL 89KEV 2026-04-20 TI-2024-18053 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2024-03-07 TI-2023-22884 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2023-10-04

Components

Products in the NVD configurations · select one to filter the records

Teamcity 283 records CRITICAL Youtrack 157 records MEDIUM Intellij Idea 77 records HIGH Hub 37 records MEDIUM Ktor 21 records MEDIUM Pycharm 12 records HIGH Toolbox 11 records MEDIUM Rider 9 records HIGH

Records

9 records in Rider · all components

TI-2024-24589 CVE-2024-37051 · GHSA-vfg9-hgrq-rjhq

Insufficiently protected credentials in JetBrains IntelliJ IDEA

HIGH 75

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.04883 Published 2024-06-10 Fixed in 2023.1.7, 2023.2.7 +19 CWE-522

TI-2025-17154 CVE-2025-23385 · GHSA-m9gq-w7jg-mrwv

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4…

LOW 35

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation v…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00135 Published 2025-01-28 Fixed in 2024.3.4, 2024.2.8 +2 CWE-114

TI-2020-06390 CVE-2020-7906 · GHSA-h8r4-m8jx-qp8j

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries…

LOW 34

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00673 Published 2020-01-30 No fix listed CWE-347

TI-2019-11158 CVE-2019-14960 · GHSA-wmp8-9743-fhp5

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.

LOW 34

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0034 Published 2019-10-01 No fix listed CWE-426

TI-2025-27883 CVE-2025-43016 · GHSA-mh9p-68jq-94rw

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

LOW 33

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2025-04-25 Fixed in 2025.1.2 CWE-23

TI-2022-17470 CVE-2022-37396 · GHSA-h2mh-cfmg-5q55

In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

LOW 33

In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00198 Published 2022-08-03 Fixed in 2022.2 CWE-94

TI-2025-39859 CVE-2025-64457 · GHSA-2v7h-6c67-v7p4

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

LOW 31

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00097 Published 2025-11-10 Fixed in 2025.2.5 CWE-367

TI-2026-64606 CVE-2026-100265 · GHSA-f82x-3h7v-827j

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation

LOW 28

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00103 Published 2026-09-30 Fixed in 2026.2.1 CWE-494

TI-2024-16446 CVE-2024-24939 · GHSA-qwqw-5hfm-4vgg

In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

LOW 24

In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00284 Published 2024-02-06 Fixed in 2023.3.3 CWE-532

Open these records in search →

Critical	84
High	249
Medium	403
Low	52
No CVSS	0