Citrix vulnerabilities
46 CVEs and advisories name Citrix as an affected vendor, 5 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-53564Arbitrary file read and write
- CVE-2026-53563Persistent Command Execution
- CVE-2026-84419Out-of-Bounds Write
- CVE-2026-53562Local Privilege Escalation
- CVE-2026-78547Out-of-Bounds Write
- CVE-2026-18751Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
- CVE-2026-53566Out-of-bounds memory read
- CVE-2026-53565Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2025-6759Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2025-0320Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2025-4879Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2025-1223An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
- CVE-2025-1222An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
- CVE-2024-8068Privilege escalation to NetworkService Account access
- CVE-2024-7890Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2024-7889Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2024-6677Privilege escalation in uberAgent
- CVE-2024-6149Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
- CVE-2024-6148Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5
- CVE-2024-6150A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning
- CVE-2024-6286Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2024-6151Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
- CVE-2024-5661Potential Denial of Service affecting XenServer and Citrix Hypervisor
- CVE-2024-2049Server-Side Request Forgery (SSRF)
- CVE-2023-4966Unauthenticated sensitive information disclosure
- CVE-2023-3467Privilege Escalation to root administrator (nsroot)
- CVE-2023-3466Reflected Cross-Site Scripting (XSS)
- CVE-2023-3519Unauthenticated remote code execution
- CVE-2023-24492 A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely
- CVE-2023-24491 A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with acc