
CVE-2025-0320 – Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2025-0320
17 Jun 2025 — Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows • https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694724 • CWE-269: Improper Privilege Management •

CVE-2025-4879 – Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2025-4879
17 Jun 2025 — Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694718 • CWE-269: Improper Privilege Management •

CVE-2025-1223 – An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
https://notcve.org/view.php?id=CVE-2025-1223
20 Feb 2025 — An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac • https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US • CWE-427: Uncontrolled Search Path Element •

CVE-2025-1222 – An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
https://notcve.org/view.php?id=CVE-2025-1222
20 Feb 2025 — An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac • https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US •

CVE-2024-7890 – Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-7890
11 Sep 2024 — Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US • CWE-269: Improper Privilege Management •

CVE-2024-7889 – Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-7889
11 Sep 2024 — Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US • CWE-664: Improper Control of a Resource Through its Lifetime •

CVE-2024-42423
https://notcve.org/view.php?id=CVE-2024-42423
10 Sep 2024 — Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering. La versión 23.9.0.24.4 de la aplicación Citrix Workspace en Dell ThinOS 2311 contiene una vulnerabilidad de autorización incorrecta cuando Citrix CEB está hab... • https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities • CWE-863: Incorrect Authorization •

CVE-2024-6677
https://notcve.org/view.php?id=CVE-2024-6677
12 Jul 2024 — Privilege escalation in uberAgent Escalada de privilegios en uberAgent • https://support.citrix.com/article/CTX691103/citrix-uberagent-security-bulletin-for-cve20246677 • CWE-269: Improper Privilege Management •

CVE-2024-6148
https://notcve.org/view.php?id=CVE-2024-6148
10 Jul 2024 — Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 Omitir los ajustes de configuración de políticas GACS en la aplicación Citrix Workspace para HTML5 • https://support.citrix.com/article/CTX678037 • CWE-276: Incorrect Default Permissions •

CVE-2024-6286 – Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-6286
10 Jul 2024 — Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows La escalada de privilegios locales permite a un usuario con pocos privilegios obtener privilegios de SYSTEM en la aplicación Citrix Workspace para Windows Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/article/CTX678036 • CWE-269: Improper Privilege Management •