{
  "cveId": "CVE-2025-23385",
  "url": "https://patchblox.com/security/cve/CVE-2025-23385",
  "summary": "CVE-2025-23385 is fixed in JetBrains ReSharper on 1 platform by JetBrains ReSharper 2024.3.4 (version 2024.3.4), released January 23, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "JetBrains ReSharper: Process Control",
  "description": "In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible",
  "published": "2025-01-28T16:15:41Z",
  "severity": "",
  "cvss": 7.8,
  "cwe": "CWE-114: Process Control",
  "epss": 0.00135,
  "epssPercentile": 0.02977,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2025-23385",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "JetBrains ReSharper",
      "fixedVersion": "2024.3.4",
      "fix": "JetBrains ReSharper 2024.3.4",
      "url": "https://patchblox.com/security/fix/windows-app/jetbrains.resharper-2024.3.4",
      "released": "2025-01-23T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}