WO
Product
Workspace
On CISA KEVExploited in the wildRansomware-linked
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 3Low 0
Watch
Add Workspace to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6148 | 8.8 | Jul 10 | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 Affected: before 2404.1 |
| CVE-2020-8207 | 8.8 | Jul 24 | Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running Affected: 1912; 2002 |
| CVE-2025-4879 | 7.8 | Jun 17 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Affected: before 2402; before 2409; 2402; 2402; 2402; 2402 |
| CVE-2024-6286 | 7.8 | Jul 10 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Affected: before 2203.1; before 2403.1; 2203.1; 2203.1; 2203.1; 2203.1; +3 more |
| CVE-2023-24485 | 7.8 | Feb 16 | Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app Affected: before 2212; 1912; 1912; 1912; 1912; 1912; +5 more |
| CVE-2022-21825 | 7.8 | Feb 9 | An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege… Affected: 2012 before 2112 |
| CVE-2021-22907 | 7.8 | May 27 | An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4 Affected: before 19.12.4000; before 2105 |
| CVE-2024-7890 | 7.3 | Sep 11 | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Affected: before 2203.1; 2203.1; 2203.1; 2203.1; 2203.1; 2203.1; +4 more |
| CVE-2024-7889 | 7.3 | Sep 11 | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Affected: before 2203.1; 2203.1; 2203.1; 2203.1; 2203.1; 2203.1; +4 more |
| CVE-2024-42423 | 7.1 | Sep 10 | Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin Affected: 23.9.0.24.4; 23.9.0.24.4 |
Showing 10