citrix
- Total products in the ecosystem
- 32
- Total vulnerabilities (90 days)
- 4
en
Verify to analyze this security profile
As of 09/29/2026, citrix recorded 4 security vulnerabilities in the last 90 days across 5 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Citrix Endpoint Analysis Client for Windows had the most security vulnerabilities in the citrix ecosystem, with 1 vulnerabilities—approximately 25% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-78547Out-of-Bounds Write | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Windows | Published09/11/2026 | SeverityMedium |
CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 | Exploitation statusPublic exploit | FixYes | Affected productADC | Published08/19/2026 | SeverityCritical |
CVE-2026-18751Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWorkSpace App | Published08/18/2026 | SeverityMedium |
CVE-2026-53566Out-of-bounds memory read | Exploitation statusNot known exploited | FixYes | Affected productCitrix Secure Access client for Windows | Published07/14/2026 | SeverityMedium |
CVE-2026-53565Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productSecure Access Client for Windows | Published07/14/2026 | SeverityHigh |
CVE-2026-13474Denial of service via malformed HTTP/2 requests | Exploitation statusNot known exploited | FixYes | Affected productADC | Published06/30/2026 | SeverityHigh |
CVE-2026-10817Insufficient input validation leading to memory overread | Exploitation statusNot known exploited | FixYes | Affected productADC | Published06/30/2026 | SeverityMedium |
CVE-2026-10816Arbitrary File Read (Unauthenticated) | Exploitation statusNot known exploited | FixYes | Affected productADC | Published06/30/2026 | SeverityHigh |
CVE-2026-8655Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productADC | Published06/30/2026 | SeverityHigh |
CVE-2026-8452Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service | Exploitation statusKEV | FixYes | Affected productADC | Published06/30/2026 | SeverityHigh |
CVE-2026-8451Insufficient input validation leading to memory overread | Exploitation statusNot known exploited | FixYes | Affected productADC | Published06/30/2026 | SeverityHigh |
CVE-2026-3055Insufficient input validation leading to memory overread | Exploitation statusKEV | FixYes | Affected productADC | Published03/23/2026 | SeverityCritical |
CVE-2025-7776Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productADC | Published08/26/2025 | SeverityHigh |
CVE-2025-7775Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service | Exploitation statusKEV | FixYes | Affected productADC | Published08/26/2025 | SeverityCritical |
CVE-2025-6759Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productWindows Virtual Delivery Agent for CVAD and Citrix DaaS | Published07/08/2025 | SeverityHigh |
CVE-2025-6543Memory overflow vulnerability leading to unintended control flow and Denial of Service | Exploitation statusKEV | FixYes | Affected productADC | Published06/25/2025 | SeverityCritical |
CVE-2025-0320Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productSecure Access Client for Windows | Published06/17/2025 | SeverityHigh |
CVE-2025-4879Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productWorkspace App for Windows | Published06/17/2025 | SeverityHigh |
CVE-2025-4365NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read | Exploitation statusNot known exploited | FixYes | Affected productConsole | Published06/17/2025 | SeverityMedium |
CVE-2025-5349NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface | Exploitation statusNot known exploited | FixYes | Affected productADC | Published06/17/2025 | SeverityHigh |
CVE-2025-5777NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread | Exploitation statusKEV | FixYes | Affected productADC | Published06/17/2025 | SeverityCritical |
CVE-2025-1223An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data | Exploitation statusNot known exploited | FixYes | Affected productSecure Access Client for Mac | Published02/20/2025 | SeverityMedium |
CVE-2025-1222An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data | Exploitation statusNot known exploited | FixYes | Affected productSecure Access Client for Mac | Published02/20/2025 | SeverityMedium |
CVE-2024-12284Authenticated privilege escalation | Exploitation statusNot known exploited | FixYes | Affected productConsole | Published02/19/2025 | SeverityHigh |
CVE-2024-8535Authenticated user can access unintended user capabilities | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published11/12/2024 | SeverityMedium |
CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published11/12/2024 | SeverityHigh |
CVE-2024-8069Limited remote code execution with privilege of a NetworkService Account access | Exploitation statusKEV | FixYes | Affected productCitrix Session Recording | Published11/12/2024 | SeverityMedium |
CVE-2024-8068Privilege escalation to NetworkService Account access | Exploitation statusKEV | FixYes | Affected productCitrix Session Recording | Published11/12/2024 | SeverityMedium |
CVE-2024-7890Local privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Windows | Published09/11/2024 | SeverityMedium |
CVE-2024-7889Local privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Windows | Published09/11/2024 | SeverityHigh |
CVE-2024-42423 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWyse Proprietary OS (Modern ThinOS) | Published09/10/2024 | SeverityMedium |
CVE-2024-6677 | Exploitation statusNot known exploited | FixYes | Affected productuberAgent | Published07/12/2024 | SeverityHigh |
CVE-2024-6149 | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for HTML5 | Published07/10/2024 | SeverityMedium |
CVE-2024-6148 | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for HTML5 | Published07/10/2024 | SeverityMedium |
CVE-2024-6150 | Exploitation statusNot known exploited | FixYes | Affected productCitrix Provisioning | Published07/10/2024 | SeverityMedium |
CVE-2024-6286Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Windows | Published07/10/2024 | SeverityHigh |
CVE-2024-6151Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges | Exploitation statusNot known exploited | FixYes | Affected productWindows Virtual Delivery Agent | Published07/10/2024 | SeverityHigh |
CVE-2024-6236Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productNetScaler Console | Published07/10/2024 | SeverityHigh |
CVE-2024-6235Sensitive information disclosure | Exploitation statusPublic exploit | FixYes | Affected productNetScaler Console | Published07/10/2024 | SeverityCritical |
CVE-2024-5492Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published07/10/2024 | SeverityMedium |
CVE-2024-5491Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published07/10/2024 | SeverityHigh |
CVE-2024-5661Potential Denial of Service affecting XenServer and Citrix Hypervisor | Exploitation statusNot known exploited | FixYes | Affected productCitrix Hypervisor | Published06/13/2024 | SeverityMedium |
CVE-2024-3661DHCP routing options can manipulate interface-based VPN traffic | Exploitation statusNot known exploited | FixNot confirmed | Affected productDHCP | Published05/06/2024 | SeverityHigh |
CVE-2024-2049Server-Side Request Forgery (SSRF) | Exploitation statusNot known exploited | FixYes | Affected productCitrix SD-WAN Standard/Premium Editions | Published03/12/2024 | SeverityMedium |
CVE-2023-6184 | Exploitation statusNot known exploited | FixYes | Affected productCitrix Session Recording | Published01/18/2024 | SeverityMedium |
CVE-2023-6549 | Exploitation statusKEV | FixYes | Affected productNetScaler ADC | Published01/17/2024 | SeverityHigh |
CVE-2023-6548 | Exploitation statusKEV | FixYes | Affected productNetScaler ADC | Published01/17/2024 | SeverityMedium |
CVE-2023-4967Denial of service | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published10/27/2023 | SeverityHigh |
CVE-2023-4966Unauthenticated sensitive information disclosure | Exploitation statusKEV | FixYes | Affected productNetScaler ADC | Published10/10/2023 | SeverityCritical |
CVE-2023-3467 | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published07/19/2023 | SeverityHigh |
CVE-2023-3466 | Exploitation statusNot known exploited | FixYes | Affected productNetScaler ADC | Published07/19/2023 | SeverityHigh |
CVE-2023-3519 | Exploitation statusKEV | FixYes | Affected productNetScaler ADC | Published07/19/2023 | SeverityCritical |
CVE-2023-24492 | Exploitation statusNot known exploited | FixYes | Affected productCitrix Secure Access client for Ubuntu | Published07/11/2023 | SeverityCritical |
CVE-2023-24491 | Exploitation statusNot known exploited | FixYes | Affected productCitrix Secure Access client for Windows | Published07/11/2023 | SeverityHigh |
CVE-2023-24489 | Exploitation statusKEV | FixYes | Affected productCitrix ShareFile Storage Zones Controller | Published07/10/2023 | SeverityCritical |
CVE-2023-24490Users with only access to launch VDA applications can launch an unauthorized desktop | Exploitation statusNot known exploited | FixYes | Affected productVirtual Delivery Agents for Windows for CVAD and Citrix DaaS Security | Published07/10/2023 | SeverityMedium |
CVE-2023-24487Arbitrary file read | Exploitation statusNot known exploited | FixYes | Affected productCitrix ADC and Citrix Gateway | Published07/10/2023 | SeverityMedium |
CVE-2023-24488Cross site scripting | Exploitation statusNot known exploited | FixYes | Affected productCitrix ADC and Citrix Gateway | Published07/10/2023 | SeverityMedium |
CVE-2023-24486Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Linux | Published07/10/2023 | SeverityMedium |
CVE-2023-24484A malicious user can cause log files to be written to a directory that they do not have permission to write to. | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Windows | Published02/16/2023 | SeverityMedium |
CVE-2023-24483Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA | Exploitation statusNot known exploited | FixYes | Affected productCitrix Virtual Apps and Desktops | Published02/16/2023 | SeverityHigh |
CVE-2023-24485Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows | Exploitation statusNot known exploited | FixYes | Affected productCitrix Workspace app for Windows | Published02/16/2023 | SeverityHigh |
CVE-2022-27508Unauthenticated denial of service | Exploitation statusNot known exploited | FixNot confirmed | Affected productCitrix Application Delivery Controller (Citrix ADC) and Citrix Gateway | Published01/24/2023 | SeverityHigh |
CVE-2022-27507Authenticated denial of service | Exploitation statusNot known exploited | FixYes | Affected productCitrix Application Delivery Controller (Citrix ADC) and Citrix Gateway | Published01/24/2023 | SeverityMedium |
CVE-2019-18177 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published12/26/2022 | SeverityMedium |
CVE-2022-27518Unauthenticated remote arbitrary code execution | Exploitation statusKEV | FixNot confirmed | Affected productCitrix Gateway, Citrix ADC | Published12/13/2022 | SeverityCritical |
CVE-2022-27516User login brute force protection functionality bypass | Exploitation statusNot known exploited | FixNot confirmed | Affected productCitrix Gateway, Citrix ADC | Published11/08/2022 | SeverityMedium |
CVE-2022-27510Unauthorized access to Gateway user capabilities | Exploitation statusNot known exploited | FixNot confirmed | Affected productCitrix Gateway, Citrix ADC | Published11/08/2022 | SeverityCritical |
CVE-2022-27513Remote desktop takeover via phishing | Exploitation statusNot known exploited | FixNot confirmed | Affected productCitrix Gateway, Citrix ADC | Published11/08/2022 | SeverityHigh |
CVE-2022-27512Temporary disruption of the ADM license service | Exploitation statusNot confirmed | FixYes | Affected productCitrix Application Delivery Management (Citrix ADM) | Published06/16/2022 | SeverityUnknown |
CVE-2022-27511Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator password | Exploitation statusNot confirmed | FixYes | Affected productCitrix Application Delivery Management (Citrix ADM) | Published06/16/2022 | SeverityUnknown |
CVE-2022-21827 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Gateway Windows Plugin | Published05/26/2022 | SeverityUnknown |
CVE-2021-44519 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/19/2022 | SeverityUnknown |
CVE-2022-27506 | Exploitation statusNot confirmed | FixYes | Affected productCitrix SD-WAN | Published04/13/2022 | SeverityUnknown |
CVE-2022-27503 | Exploitation statusNot confirmed | FixYes | Affected productStoreFront | Published04/13/2022 | SeverityUnknown |
CVE-2022-26151 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2021-44520 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-26355Citrix Federated Authentication Service (FAS) | Exploitation statusNot confirmed | FixNot confirmed | Affected productFederated Authentication Service (FAS) | Published03/09/2022 | SeverityUnknown |
CVE-2022-21825 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Workspace App for Linux | Published02/09/2022 | SeverityUnknown |
CVE-2021-22956 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ADC, Citrix Gateway, Citrix SDWAN | Published12/07/2021 | SeverityUnknown |
CVE-2021-22955 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ADC, Citrix Gateway | Published12/07/2021 | SeverityUnknown |
CVE-2021-22941 | Exploitation statusKEV | FixNot confirmed | Affected productCitrix ShareFile storage zones controller | Published09/23/2021 | SeverityCritical |
CVE-2021-22932 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ShareFile Storage Zones Controller | Published08/16/2021 | SeverityUnknown |
CVE-2021-22920 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ADC, Citrix Gateway | Published08/05/2021 | SeverityUnknown |
CVE-2021-22927 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ADC, Citrix Gateway | Published08/05/2021 | SeverityUnknown |
CVE-2021-22928 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Virtual Apps and Desktops | Published08/05/2021 | SeverityUnknown |
CVE-2020-8299 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ADC, Citrix Gateway, Citrix SD-WAN WANOP Edition | Published06/16/2021 | SeverityUnknown |
CVE-2021-22914 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Cloud Connector | Published06/16/2021 | SeverityUnknown |
CVE-2021-22891 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix ShareFile Storage Zones Controller | Published05/27/2021 | SeverityUnknown |
CVE-2021-22907 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Workspace App for Windows | Published05/27/2021 | SeverityUnknown |
CVE-2020-8274 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Secure Mail for Android | Published01/06/2021 | SeverityUnknown |
CVE-2020-8275 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Secure Mail for Android | Published01/06/2021 | SeverityUnknown |
CVE-2020-8258 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Gateway Plug-in for Windows | Published12/14/2020 | SeverityUnknown |
CVE-2020-8257 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Gateway Plug-in for Windows | Published12/14/2020 | SeverityUnknown |
CVE-2020-8283 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Virtual Apps and Desktops | Published12/14/2020 | SeverityUnknown |
CVE-2020-8270 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Virtual Apps and Desktops | Published11/16/2020 | SeverityUnknown |
CVE-2020-8269 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix Virtual Apps and Desktops | Published11/16/2020 | SeverityUnknown |
CVE-2020-8273 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix SD-WAN Center | Published11/16/2020 | SeverityUnknown |
CVE-2020-8272 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix SD-WAN Center | Published11/16/2020 | SeverityUnknown |
CVE-2020-8271 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCitrix SD-WAN Center | Published11/16/2020 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan