CVE-2025-1222: Undefined Security Weakness

An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac...

CVE-2025-1223: Uncontrolled Search Path Element

An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac...

Citrix Secure Access Client for Mac Security Bulletin for CVE-2025-1222 and CVE-2025-1223

Description of Problem Vulnerabilities have been discovered in Citrix Secure Access Client for Mac. Refer to below for further details: Affected Versions: The following supported versions of Citrix Secure Access Client for Mac are affected: Citrix Secure Access Client for Mac versions BEFORE...

CVE-2023-24492: Improper Control of Generation of Code

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...

CVE-2023-24491: Improper Privilege Management

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...