
CVE-2025-1223 – An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
https://notcve.org/view.php?id=CVE-2025-1223
20 Feb 2025 — An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac • https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US • CWE-427: Uncontrolled Search Path Element •

CVE-2025-1222 – An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
https://notcve.org/view.php?id=CVE-2025-1222
20 Feb 2025 — An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac • https://support.citrix.com/s/article/CTX692679-citrix-secure-access-client-for-mac-security-bulletin-for-cve20251222-and-cve20251223?language=en_US •

CVE-2024-7890 – Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-7890
11 Sep 2024 — Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US • CWE-269: Improper Privilege Management •

CVE-2024-7889 – Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-7889
11 Sep 2024 — Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US • CWE-664: Improper Control of a Resource Through its Lifetime •

CVE-2024-42423
https://notcve.org/view.php?id=CVE-2024-42423
10 Sep 2024 — Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering. La versión 23.9.0.24.4 de la aplicación Citrix Workspace en Dell ThinOS 2311 contiene una vulnerabilidad de autorización incorrecta cuando Citrix CEB está hab... • https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities • CWE-863: Incorrect Authorization •

CVE-2024-6677
https://notcve.org/view.php?id=CVE-2024-6677
12 Jul 2024 — Privilege escalation in uberAgent Escalada de privilegios en uberAgent • https://support.citrix.com/article/CTX691103/citrix-uberagent-security-bulletin-for-cve20246677 • CWE-269: Improper Privilege Management •

CVE-2024-6148
https://notcve.org/view.php?id=CVE-2024-6148
10 Jul 2024 — Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 Omitir los ajustes de configuración de políticas GACS en la aplicación Citrix Workspace para HTML5 • https://support.citrix.com/article/CTX678037 • CWE-276: Incorrect Default Permissions •

CVE-2024-6286 – Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-6286
10 Jul 2024 — Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows La escalada de privilegios locales permite a un usuario con pocos privilegios obtener privilegios de SYSTEM en la aplicación Citrix Workspace para Windows Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows • https://support.citrix.com/article/CTX678036 • CWE-269: Improper Privilege Management •

CVE-2024-6151 – Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
https://notcve.org/view.php?id=CVE-2024-6151
10 Jul 2024 — Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS La escalada de privilegios locales permite a un usuario con pocos privilegios obtener privilegios de SYSTEM en Virtual Delivery Agent para Windows utilizado por Citrix Virtual Apps and Desktops y Citrix DaaS. Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used b... • https://support.citrix.com/article/CTX678035 • CWE-269: Improper Privilege Management •

CVE-2024-5661 – Potential Denial of Service affecting XenServer and Citrix Hypervisor
https://notcve.org/view.php?id=CVE-2024-5661
13 Jun 2024 — An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. Se ha identificado un problema tanto en XenServer 8 como en Citrix Hypervisor 8.2 CU1 LTSR que puede permitir que un administrador malintencionado de una máquina virtual invitada haga que el host se vuelva lento o no responda. • https://support.citrix.com/article/CTX677100/xenserver-and-citrix-hypervisor-security-update-for-cve20245661 •