JetBrains Dottrace vulnerabilities

2 CVEs affecting JetBrains Dottrace, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-64457, published 2025-11-10.

More from JetBrains.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-23385, published 2025-01-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local…
• CVE-2025-64457, published 2025-11-10. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition