58.476 CVE tracked
793 Exploited now
188 Used by ransomware
Last sync
Citrix vulnerabilities
402 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-4879 | HIGH 7.8 | citrix workspace Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows | 0.1% | — |
| CVE-2025-0320 | HIGH 7.8 | citrix secure_access_client Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows | 0.1% | — |
| CVE-2024-42423 | MED 6.1 | citrix workspace Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existi | 0.2% | — |
| CVE-2025-1223 | MED 6.1 | citrix secure_access_client An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac | 0.2% | — |
| CVE-2025-1222 | MED 6.1 | citrix secure_access_client An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac | 0.2% | — |
| CVE-2024-5661 | MED 6.0 | citrix hypervisor An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. | 0.2% | — |
| CVE-2022-26355 | MED 4.4 | citrix federated_authentication_service Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module (TPM) to incorrectly store that key in the Microsoft Software Key St | 0.2% | — |
| CVE-2024-7890 | HIGH 7.3 | citrix workspace Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows | 0.2% | — |
| CVE-2022-21827 | HIGH 7.1 | citrix gateway_plug-in An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt | 0.2% | — |
| CVE-2023-24486 | MED 5.5 | citrix workspace A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which t | 0.2% | — |
| CVE-2023-24491 | HIGH 7.8 | citrix secure_access_client A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privilege | 0.2% | — |
| CVE-2024-6151 | HIGH 7.8 | citrix virtual_apps_and_desktops Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS | 0.2% | — |
| CVE-2023-24485 | HIGH 7.8 | citrix workspace Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app. | 0.2% | — |
| CVE-2022-21825 | HIGH 7.8 | citrix workspace An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation. | 0.2% | — |
| CVE-2024-6677 | HIGH 7.8 | citrix uberagent Privilege escalation in uberAgent | 0.2% | — |
| CVE-2024-6149 | MED 6.1 | citrix workspace Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 | 0.2% | — |
| CVE-2024-6150 | MED 4.3 | citrix provisioning A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning | 0.2% | — |
| CVE-2021-22907 | HIGH 7.8 | citrix workspace An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4. | 0.2% | — |
| CVE-2026-88774 | HIGH 7.2 | citrix netscaler_application_delivery_controller Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feat | 0.2% | — |
| CVE-2025-6759 | HIGH 7.8 | citrix virtual_apps_and_desktops Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS | 0.2% | — |
| CVE-2024-7889 | HIGH 7.3 | citrix workspace Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows | 0.2% | — |
| CVE-2021-22928 | HIGH 7.8 | citrix virtual_apps_and_desktops A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on tha | 0.2% | — |
| CVE-2023-24484 | MED 5.5 | citrix workspace A malicious user can cause log files to be written to a directory that they do not have permission to write to. | 0.3% | — |
| CVE-2023-24483 | HIGH 7.8 | citrix virtual_apps_and_desktops A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA. | 0.3% | — |
| CVE-2008-6561 | LOW 1.9 | citrix presentation_server_client Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges. | 0.3% | — |