RI
Product
Rider
9
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 7Medium 2Low 0
Watch
Add Rider to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23385 | 7.8 | Jan 28 | In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service… Affected: before 2024.1.7; 2024.2.0 before 2024.2.8; 2024.3.0 before 2024.3.4 |
| CVE-2022-37396 | 7.8 | Aug 3 | In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution Affected: 2022.2 before 2022.2 |
| CVE-2019-14960 | 7.8 | Oct 1 | JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file Affected: before 2019.1.2 |
| CVE-2025-43016 | 7.5 | Apr 25 | In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session Affected: before 2025.1.2 |
| CVE-2024-37051 | 7.5 | Jun 10 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3;… Affected: before 2023.1.7; 2023.2.0 before 2023.2.5; 2023.3.0 before 2023.3.6; 2024.1.0 before 2024.1.3 |
| CVE-2020-7906 | 7.5 | Jan 30 | In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer Affected: 2019.3.0 |
| CVE-2025-64457 | 7.0 | Nov 10 | In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition Affected: before 2025.2.5 |
Showing 7
