Citrix Workspace App For Windows vulnerabilities

5 known vulnerabilities affecting citrix/citrix_workspace_app_for_windows.

Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2024-7889HIGHCVSS 7.0≥ Current Release (CR), < 2405≥ Long Term Service Release (LTSR), < 2402 LTSR CU12024-09-11
CVE-2024-7889 [HIGH] CWE-664 CVE-2024-7889: Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspac Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
nvd
CVE-2024-7890MEDIUMCVSS 5.4≥ Current Release (CR) 0, < 2405≥ Long Term Service Release (LTSR) 0, < 2402 LTSR CU12024-09-11
CVE-2024-7890 [MEDIUM] CWE-269 CVE-2024-7890: Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspac Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
nvd
CVE-2024-6286HIGHCVSS 8.5≥ 2403, < 1≥ 2402 LTSR, < 02024-07-10
CVE-2024-6286 [HIGH] CWE-269 CVE-2024-6286: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspa Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
nvd
CVE-2023-24485HIGHCVSS 7.8≥ Citrix Workspace App versions, < 22122023-02-16
CVE-2023-24485 [HIGH] CWE-284 CVE-2023-24485: Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform op Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.
nvd
CVE-2023-24484MEDIUMCVSS 5.5≥ Citrix Workspace App versions, < 22122023-02-16
CVE-2023-24484 [MEDIUM] CWE-284 CVE-2023-24484: A malicious user can cause log files to be written to a directory that they do not have permission t A malicious user can cause log files to be written to a directory that they do not have permission to write to.
nvd