Citrix vulnerabilities
The newest vulnerabilities affecting Citrix, up to 200. Subscribe by RSS.
- CVE-2026-53564Arbitrary file read and writeCitrix UniconOS
- CVE-2026-53563Persistent Command ExecutionCitrix UniconOS
- CVE-2026-84419Out-of-Bounds WriteCitrix Workspace app for Windows
- CVE-2026-53562Local Privilege EscalationCitrix UniconOS
- CVE-2026-88778TCP Initial Sequence Number (ISN) predictionCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88777Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of ServiceCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88776Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of ServiceCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88775Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of ServiceCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88773HTTP Request SmugglingCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88774Feature policy bypass due to improper HTTP URL based expression usageCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88772Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-88771A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2026-78547Out-of-Bounds WriteCitrix Workspace app for Windows
- CVE-2026-18751Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751Citrix WorkSpace App
- CVE-2026-53566Out-of-bounds memory readCitrix Secure Access Client for Windows
- CVE-2026-53565Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Secure Access Client for Windows · Citrix Endpoint A…
- CVE-2025-6759Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesWindows Virtual Delivery Agent for CVAD and Citrix DaaS
- CVE-2025-0320Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Secure Access Client for Windows
- CVE-2025-4879Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Workspace App for Windows
- CVE-2025-1223An attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataCitrix Secure Access Client for Mac
- CVE-2025-1222An attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataCitrix Secure Access Client for Mac
- CVE-2024-8535Authenticated user can access unintended user capabilitiesNetScaler ADC · NetScaler Gateway
- CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of ServiceNetSclaer NetScaler ADC · NetScaler Gateway
- CVE-2024-8069Limited remote code execution with privilege of a NetworkService Account accessCitrix Session Recording
- CVE-2024-8068Privilege escalation to NetworkService Account accessCitrix Session Recording
- CVE-2024-7890Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Workspace app for Windows
- CVE-2024-7889Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Workspace app for Windows
- CVE-2024-6677Privilege escalation in uberAgentCitrix uberAgent
- CVE-2024-6149Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5Citrix Workspace app for HTML5
- CVE-2024-6148Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5Citrix Workspace app for HTML5
- CVE-2024-6150A non-admin user can cause short-term disruption in Target VM availability in Citrix ProvisioningCitrix Provisioning
- CVE-2024-6286Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Workspace app for Windows
- CVE-2024-6151Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Windows Virtual Delivery Agent
- CVE-2024-6236Denial of ServiceNetSclaer NetScaler Console · NetScaler Agent +1
- CVE-2024-6235Sensitive information disclosureNetScaler Console
- CVE-2024-5492Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websitesNetSclaer NetScaler ADC
- CVE-2024-5491Denial of ServiceNetScaler ADC · NetScaler Gateway
- CVE-2024-5661Potential Denial of Service affecting XenServer and Citrix HypervisorCitrix Hypervisor · Citrix XenServer
- CVE-2024-2049Server-Side Request Forgery (SSRF)Citrix SD-WAN Standard/Premium Editions
- CVE-2023-6184Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site ScriptingCloud Software Group Citrix Session Recording
- CVE-2023-5914 Cross-site scripting (XSS)Cloud Software Group Citrix StoreFront
- CVE-2023-6549Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated DenialCloud Software Group NetScaler ADC
- CVE-2023-6548Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLICloud Software Group NetScaler ADC · Cloud Software Group N…
- CVE-2023-4967Denial of serviceCloud Software Group NetScaler ADC · Cloud Software Group N…
- CVE-2023-4966Unauthenticated sensitive information disclosureCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2023-3467Privilege Escalation to root administrator (nsroot) Citrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2023-3466Reflected Cross-Site Scripting (XSS) Citrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2023-3519Unauthenticated remote code executionCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2023-24492 A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely Citrix Secure Access client for Ubuntu
- CVE-2023-24491 A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with accCitrix Secure Access client for Windows
- CVE-2023-24489A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthentCitrix ShareFile Storage Zones Controller
- CVE-2023-24490Users with only access to launch VDA applications can launch an unauthorized desktopVirtual Delivery Agents for Windows for CVAD and Citrix Daa…
- CVE-2023-24487Arbitrary file readCitrix ADC and Citrix Gateway
- CVE-2023-24488Cross site scriptingCitrix ADC and Citrix Gateway
- CVE-2023-24486Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applicationsCitrix Workspace app for Linux
- CVE-2023-24483Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDACitrix Virtual Apps and Desktops
- CVE-2023-24484A malicious user can cause log files to be written to a directory that they do not have permission to write to.Citrix Workspace App for Windows
- CVE-2023-24485Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for WindowsCitrix Workspace App for Windows
- CVE-2022-27518Unauthenticated remote arbitrary code executionCitrix Gateway, Citrix ADC
- CVE-2022-27516User login brute force protection functionality bypass Citrix Gateway, Citrix ADC
- CVE-2022-27510Unauthorized access to Gateway user capabilities Citrix Gateway, Citrix ADC
- CVE-2022-27513Remote desktop takeover via phishingCitrix Gateway, Citrix ADC
- CVE-2022-27512Temporary disruption of the ADM license serviceCitrix Application Delivery Management
- CVE-2022-27511Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator passwordCitrix Application Delivery Management
- CVE-2022-27503Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9Citrix StoreFront
- CVE-2022-26355Citrix Federated Authentication Service (FAS)Citrix Federated Authentication Service