CVE-2025-23385

Summary

CVE-2025-23385 is a critical vulnerability affecting JetBrains ReSharper versions before 2024.3.4, Rider before 2024.3.4 and 2024.2.8, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, and ETW Host Service before 16.43. The weakness enables an attacker to escalate local privileges through the ETW Host Service. This issue may allow unauthorized users to gain administrative access and potentially execute malicious code with higher permissions. Users are advised to update their affected software as soon as possible to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.