PT-2025-46148 · Jetbrains · Jetbrains Resharper

Published 2025-11-10 · Updated 2025-11-14 · CVE-2025-64456

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions JetBrains ReSharper versions prior to 2025.2.4

Description A missing signature verification in the DPA Collector component allows for local privilege escalation. The DPA Collector is likely responsible for collecting or transmitting diagnostics or telemetry data.

Recommendations Update JetBrains ReSharper to version 2025.2.4 or later.

Fix

LPE

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2025-14011

CVE-2025-64456

Affected Products

Jetbrains Resharper

References · 10

• https://bdu.fstec.ru/vul/2025-14011 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64456 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64456 · Vendor Advisory
• https://twitter.com/CVEnew/status/1987879088707572136 · Twitter Post
• https://access.triofox.com/releases_history · Note
• https://twitter.com/cracbot/status/1989287257120112814 · Twitter Post
• https://t.me/cveNotify/142263 · Telegram Post
• https://twitter.com/CveTodo/status/1987890047945695577 · Twitter Post
• https://t.me/CVEtracker/36908 · Telegram Post