What is the CVSS score of CVE-2025-23385?

CVE-2025-23385 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dottrace are affected by CVE-2025-23385?

Organizations using JetBrains ReSharper face notable risk from CVE-2025-23385 rated CVSS 7.8. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-23385?

Within 30 days: Identify all affected systems running JetBrains ReSharper and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Dottrace CVE-2025-23385

HIGH

Process Control (CWE-114)

2025-01-28 cve@jetbrains.com

Privilege Escalation Dottrace Etw Host Service Resharper Rider

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:06 vuln.today

CVE Published

Jan 28, 2025 - 16:15 nvd

HIGH 7.8

DescriptionCVE.org

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

AnalysisAI

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local. Rated high severity (CVSS 7.8). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-114. In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible Affected products include: Jetbrains Dottrace, Jetbrains Etw Host Service, Jetbrains Resharper, Jetbrains Rider. Version information: before 2024.3.4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.