CVE-2025-1222 — Insufficient Granularity of Address Regions Protected by Register Locks in Citrix Secure Access Client FOR MAC

CWE-1222 — Insufficient Granularity of Address Regions Protected by Register Locks5 documents5 sources
Severity
5.8MEDIUMNVD
EPSS
0.1%
top 69.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Citrix Secure Access Client FOR MACCitrix Secure Access Client
Timeline
PublishedFeb 20

Description

An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data↗2025-02-20
▶
GHSA
GHSA-mv3w-32c3-rrg8: An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac↗2025-02-20
▶

📋Vendor Advisories

2
Citrix
CVE-2025-1222: An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac↗2025-02-20
▶
Microsoft
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability↗2025-02-11
▶
CVE-2025-1222 — Citrix vulnerability | cvebase