Skip to content
OpenAdvisories
High WID-SEC-2026-2507 4 CVEs

JetBrains WebStorm: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jul 23, 2026 · Updated Jul 23, 2026 · de-DE

Vendor: JetBrains Product: WebStorm Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in JetBrains WebStorm ausnutzen, um beliebigen Programmcode auszuführen.

Product

WebStorm ist eine Entwicklungsumgebung für JavaScript.

Vulnerabilities 4

  • High 8.4
    CVE-2026-64804

    In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loc…

    JetBrains WebStorm
  • High 8.4
    CVE-2026-64805

    In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loc…

    JetBrains WebStorm
  • High 8.4
    CVE-2026-64806

    In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configu…

    JetBrains WebStorm
  • High 7.8
    CVE-2026-64807

    In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

    JetBrains WebStorm

Revision history

  1. #1

    Initiale Fassung

References