JetBrains Rider

• CVE-2026-118697 Critical 9.0 In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 0.3%
• CVE-2026-118696 High 8.0 In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026. 0.3%
• CVE-2026-100265 Medium 4.8 In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation 0.1%
• CVE-2025-43016 Medium 5.4 In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session 0.4%
• CVE-2025-23385 High 7.8 In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Pr 0.1%
• CVE-2024-37051 Critical 9.3 GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 4.9%
• CVE-2024-24939 Low 3.3 In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible 0.3%
• CVE-2022-37396 Medium 4.1 In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution 0.2%
• CVE-2022-29821 Medium 6.9 In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible 0.2%