Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um Informationen offenzulegen, um Code auszuführen und um Sicherheitsmaßnahmen zu umgehen.
Product
IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).
Vulnerabilities 6
-
Critical 10.0
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
-
Critical 10.0
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
-
High 8.6
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
-
High 8.1
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via develo…
-
Medium 4.3
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activ…
Revision history
-
#1
Initiale Fassung
References
-
JetBrainsFixed security issues vom 2026-07-23
https://www.jetbrains.com/privacy-security/issues-fixed/
-
GitHub Advisory Database vom 2026-07-23
https://github.com/advisories/GHSA-3RWJ-4395-CJ7H
-
GitHub Advisory Database vom 2026-07-23
https://github.com/advisories/GHSA-PJQ3-X359-M2PF
-
GitHub Advisory Database vom 2026-07-23
https://github.com/advisories/GHSA-995F-8QGF-H52P
-
GitHub Advisory Database vom 2026-07-23
https://github.com/advisories/GHSA-7XQR-WVRF-3JR9
-
GitHub Advisory Database vom 2026-07-23
https://github.com/advisories/GHSA-893F-8W7M-VH3C
-
GitHub Advisory Database vom 2026-07-23
https://github.com/advisories/GHSA-R2FM-VV3H-4QF2