TestCitrixException

Test Citrix Exception CVE-2025-6759 緩和策のテスト Citrix のドキュメント CVE-2025-6759 には、レジストリから Citrix 例外ハンドラを無効化する代替緩和策が記載されています。 しかし、そのドキュメントでは「この変更に VDA サービスまたはサーバーの再起動が必要かどうか」という疑問には答えていません。そのため、このツールはそれをテストするために作成されました。 出典: CTX676735 は、その例外処理とそのレジストリキーの仕組みについて、もう少し詳しい情報を提供しています。 Rapid 7 のブログ記事...

CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)

Overview During a Virtual Desktop Infrastructure VDI breakout assessment, Rapid7 identified a Local Privilege Escalation LPE vulnerability affecting Citrix Virtual Apps and Desktops. This issue was assigned CVE-2025-6759 and has a CVSS score of 7.3 High. Rapid7 observed a SYSTEM process handle wi...

Citrix Virtual Apps and Desktops Privilege Escalation (CTX694820)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2503, or prior to 2402 LTSR CU1 Update 1, or prior to 2402 LTSR CU2 Update 2. It is, therefore, affected by a privilege escalation vulnerability. By exploiting this vulnerability, a local,...

CVE-2025-6759

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS...

CVE-2025-6759

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS...

CVE-2025-6759 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS...

CVE-2025-6759

CVE-2025-6759 affects Citrix Virtual Apps and Desktops — specifically the Windows Virtual Delivery Agent (VDA) used by CVAD and Citrix DaaS. The root cause is an open process handle with full access leaking from SYSTEM-owned GfxMgr.exe into a less-privileged processCtxGfx.exe, allowing a low-priv...

CVE-2025-6759 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS...

CVE-2025-6759

creationtimestamp| type| source ---|---|--- 2025-07-08 13:53:29+00:00| seen| https://bsky.app/profile/rapid7.com/post/3lthh6jaj222x 2025-07-08 22:03:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114819872243162699 2025-07-09 00:35:31+00:00| seen|...