PatchTheCVECVE-2025-23385: In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7,
28
Routine
HIGH 7.8UPGRADEUPGRADEUPGRADE
CVE-2025-23385 is a high-severity flaw (CVSS 7.8) affecting dottrace, etw host service, resharper. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 97%) |
| CISA exploited list | No |
| Weakness | CWE-114 |
| Published | 2025-01-28 |
| Last modified | 2026-06-17 |
Publisher (CNA): JetBrains s.r.o. · Vendor: jetbrains
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
jetbrains dottrace UPGRADE
Affected: < 2024.1.7 · >= 2024.2 and < 2024.2.8 · >= 2024.3 and < 2024.3.4
Fixed in: 2024.1.7, 2024.2.8, 2024.3.4
Safe to downgrade to: a release before 2024.2
1. Check installed version
apt-cache policy dottrace || rpm -q dottrace || dottrace --version
2. UPGRADE to 2024.1.7 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade dottrace
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade dottrace
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2024.2 (Debian / Ubuntu)
apt-cache madison dottrace
sudo apt install dottrace=<VERSION_BEFORE_2024.2>
sudo apt-mark hold dottrace
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list dottrace
sudo dnf downgrade dottrace-<VERSION_BEFORE_2024.2>
sudo dnf versionlock add dottrace
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
jetbrains etw host service UPGRADE
Affected: < 16.43
Fixed in: 16.43
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy etw-host-service || rpm -q etw-host-service || etw-host-service --version
2. UPGRADE to 16.43 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade etw-host-service
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade etw-host-service
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
jetbrains resharper UPGRADE
Affected: < 2024.1.7 · >= 2024.2 and < 2024.2.8 · >= 2024.3 and < 2024.3.4
Fixed in: 2024.1.7, 2024.2.8, 2024.3.4
Safe to downgrade to: a release before 2024.2
1. Check installed version
apt-cache policy resharper || rpm -q resharper || resharper --version
2. UPGRADE to 2024.1.7 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade resharper
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade resharper
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2024.2 (Debian / Ubuntu)
apt-cache madison resharper
sudo apt install resharper=<VERSION_BEFORE_2024.2>
sudo apt-mark hold resharper
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list resharper
sudo dnf downgrade resharper-<VERSION_BEFORE_2024.2>
sudo dnf versionlock add resharper
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
jetbrains rider UPGRADE
Affected: < 2024.1.7 · >= 2024.2.0 and < 2024.2.8 · >= 2024.3.0 and < 2024.3.4
Fixed in: 2024.1.7, 2024.2.8, 2024.3.4
Safe to downgrade to: a release before 2024.2.0
1. Check installed version
apt-cache policy rider || rpm -q rider || rider --version
2. UPGRADE to 2024.1.7 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade rider
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade rider
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2024.2.0 (Debian / Ubuntu)
apt-cache madison rider
sudo apt install rider=<VERSION_BEFORE_2024.2.0>
sudo apt-mark hold rider
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list rider
sudo dnf downgrade rider-<VERSION_BEFORE_2024.2.0>
sudo dnf versionlock add rider
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-23385?
dottrace: upgrade to 2024.1.7, 2024.2.8, 2024.3.4; etw host service: upgrade to 16.43; resharper: upgrade to 2024.1.7, 2024.2.8, 2024.3.4. Exact commands for each OS are on this page.
Is CVE-2025-23385 being exploited?
CVE-2025-23385 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-23385 affect?
CVE-2025-23385 affects dottrace, etw host service, resharper. Severity is high (CVSS 7.8). In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Serv
How urgent is CVE-2025-23385?
Priority 28/100. High severity
Related CVEs
- CVE-2025-64457 MEDIUM 4.2 UPGRADE UPGRADE In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race co