Windows apps · Application version · May 14, 2026
IntelliJ IDEA (EAP) 262.5752.32
IntelliJ IDEA (EAP) 262.5752.32, released May 14, 2026, fixes 96 CVEs in IntelliJ IDEA (EAP). None of them is reported as exploited. Patch Radar priority: Urgent. The latest IntelliJ IDEA (EAP) is 263.7307.44, which also fixes every one of these CVEs.
Urgent
Superseded. The latest IntelliJ IDEA (EAP) is 263.7307.44, which also fixes every CVE on this page. Install that instead.
CVEs closed
96
8 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0488
92nd percentile
Priority of the 96 CVEs
Patch now 0
Urgent 8
High 44
Routine 44
Applies to
| Product | Version |
|---|---|
| IntelliJ IDEA (EAP) | 262.5752.32 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2020-11690 | IntelliJ IDEA Ultimate Edition: In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in… | 9.8 | 0.0230 | None reported |
| Urgent | CVE-2019-9873 | IntelliJ IDEA Ultimate Edition: In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to… | 9.8 | 0.0156 | None reported |
| Urgent | CVE-2026-59792 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace… | 9.8 | 0.0061 | None reported |
| Urgent | CVE-2026-64813 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote… | 10.0 | 0.0052 | None reported |
| Urgent | CVE-2026-64812 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development… | 10.0 | 0.0048 | None reported |
| Urgent | CVE-2026-64815 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | 9.8 | 0.0048 | None reported |
| Urgent | CVE-2023-51655 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via… | 9.8 | 0.0033 | None reported |
| Urgent | CVE-2026-118697 | WebStorm and 11 others: Improper Certificate Validation | 9.0 | 0.0029 | None reported |
| High | CVE-2024-37051 | WebStorm and 12 others: Insufficiently Protected Credentials | 7.5 | 0.0488 | None reported |
| High | CVE-2021-30504 | IntelliJ IDEA Ultimate Edition: In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation. | 7.5 | 0.0231 | None reported |
| High | CVE-2017-8316 | IntelliJ IDEA Ultimate Edition: IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit… | 7.5 | 0.0226 | None reported |
| High | CVE-2020-7914 | IntelliJ IDEA Ultimate Edition: In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read… | 7.5 | 0.0189 | None reported |
| High | CVE-2020-7904 | IntelliJ IDEA Ultimate Edition: In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. | 7.4 | 0.0142 | None reported |
| High | CVE-2020-7905 | IntelliJ IDEA Ultimate Edition: Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network. | 7.5 | 0.0116 | None reported |
| High | CVE-2021-30006 | IntelliJ IDEA Ultimate Edition: In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure. | 7.5 | 0.0107 | None reported |
| High | CVE-2021-25758 | IntelliJ IDEA Ultimate Edition: In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model… | 7.8 | 0.0101 | None reported |
| High | CVE-2022-48433 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ… | 7.5 | 0.0065 | None reported |
| High | CVE-2021-29263 | IntelliJ IDEA Ultimate Edition: In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks… | 7.8 | 0.0046 | None reported |
| High | CVE-2026-49366 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | 7.8 | 0.0046 | None reported |
| High | CVE-2022-24346 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters… | 7.8 | 0.0044 | None reported |
| High | CVE-2026-64814 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development… | 8.6 | 0.0039 | None reported |
| High | CVE-2022-24345 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon… | 7.8 | 0.0039 | None reported |
| High | CVE-2026-123305 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives… | 7.5 | 0.0034 | None reported |
| High | CVE-2026-49367 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account | 8.8 | 0.0033 | None reported |
| High | CVE-2022-48430 | IntelliJ IDEA Ultimate Edition and 1 other: In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path… | 7.5 | 0.0033 | None reported |
Showing 1 to 25 of 96
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.