Login Request a demo
II
Product
IntelliJ IDEA
by JetBrains · last CVE Sep 30, 2026
82
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities82In the news0Timeline
Severity mix
Critical 11High 38Medium 23Low 10
Severity
All severities82Critical11High38Medium23Low10
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add IntelliJ IDEA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-64813
10.0
1%
Jul 23
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
Affected: before 2026.2
CVE-2026-64812
10.0
0%
Jul 23
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
Affected: before 2026.2
CVE-2026-64815
9.8
0%
Jul 23
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
Affected: before 2026.2
CVE-2026-59792
9.8
1%
Jul 10
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible
Affected: before 2026.1.4, 2026.2
CVE-2023-51655
9.8
0%
Dec 21
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration
Affected: before 2023.3.2
CVE-2021-45977
9.8
1%
Feb 25
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine…
Affected: 2021.3.1; 2021.3.1
CVE-2020-11690
9.8
2%
Apr 22
In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases
Affected: before 2020.1
CVE-2019-9873
9.8
2%
Jul 3
In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE…
Affected: before 2019.1
CVE-2019-9823
9.8
2%
Jul 3
In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the…
Affected: 2018.1 before 2018.1.8; 2018.2 before 2018.2.8; 2018.3 before 2018.3.5
CVE-2019-9186
9.8
5%
Jul 3
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running,…
Affected: 2018.1 before 2018.1.8; 2018.2 before 2018.2.8; 2018.3 before 2018.3.5; 2018.3.6 before 2019.1
CVE-2019-10104
9.8
4%
Jul 3
In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote…
Affected: 2018.1 before 2018.1.8; 2018.2 before 2018.2.8; 2018.3 before 2018.3.4; 2018.3.5 before 2018.3.7
Showing 11