In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.

The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.