Login Request a demo
VA
Product
Virtual Apps And Desktops
by Citrix · last CVE Jul 8, 2025
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 8Medium 1Low 0
Severity
All severities9Critical0High8Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Virtual Apps And Desktops to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-8283
8.8
3%
Dec 14
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes…
Affected: through 2006; 1903 through 1912
CVE-2020-8270
8.8
3%
Nov 16
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and…
Affected: through 2006; 1903 through 1912
CVE-2020-8269
8.8
3%
Nov 16
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR…
Affected: through 2006; 1903 through 1912
CVE-2025-6759
7.8
0%
Jul 8
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS
Affected: before 2503; 2402; 2402; 2402
CVE-2024-6151
7.8
0%
Jul 10
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS
Affected: through 2311; 1912; 1912; 1912; 1912; 1912; +9 more
CVE-2023-24483
7.8
0%
Feb 16
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops…
Affected: before 2212; 1912; 1912; 1912; 1912; 1912; +3 more
CVE-2021-22928
7.8
0%
Aug 5
A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix…
Affected: 2006 through 2106; 1912; 1912
CVE-2023-6184
7.2
47%
Jan 18
Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting
Affected: through 2311; 1912; 1912; 1912; 1912; 1912; +8 more
CVE-2023-24490
4.3
0%
Jul 10
Users with only access to launch VDA applications can launch an unauthorized desktop
Affected: before 2305; 1912; 1912; 1912; 1912; 1912; +5 more
Showing 9