JetBrains Resharper vulnerabilities

4 CVEs affecting JetBrains Resharper, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-64457, published 2025-11-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-16407, published 2019-10-02. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.
CVE-2025-23385, published 2025-01-28. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local…
CVE-2025-64457, published 2025-11-10. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
CVE-2025-64456, published 2025-11-10. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation