CVE-2021-27007

NetApp Virtual Desktop Service VDS when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session...

NetApp Virtual Desktop Service 安全漏洞

Netapp NetApp Virtual Desktop Service is a simple desktop service from NetApp USA that automates, manages and optimizes your digital workspace in the public cloud. When used with an HTML5 gateway, an attacker could exploit this vulnerability to take over a remote desktop session...

Amzetta Technologies Amzetta zPortal DVM Buffer Overflow Vulnerability

Amzetta Technologies Amzetta Zportal is a virtual desktop and application controller from Amzetta Technologies, Inc. It is used by administrators to create and manage hosted applications, virtual desktops, shared hosted desktops, and auditing services, provide resources for virtual desktops, prox...

Microsoft Teams optimization not working for self-hosted Citrix Workspace app for Chrome OS users

Users who meet all below conditions use self-hosted/repackaged versions of Citrix Workspace app for Chrome OS from their own enterprise admin consoles AND have updated to Chrome OS Version 96 and above, AND have enabled Microsoft Teams optimization AND are onversion 2111 of Citrix Workspace app f...

Grey Screen when Launching Citrix Virtual Desktop with Citrix WEM Service Agent.

Citrix Virtual Desktops with Citrix Workspace Environment Management Service agents installed may encounter grey screens on launch...

Launching Citrix Virtual Desktop or App Sessions Prompts via Citrix Workspace App "An Online Application is attempting to access information on a device attached to your computer"

When launching Citrix Virtual Desktops or Apps, users are prompted with: "An Online Application is attempting to access information on a device attached to your computer"...

CVE-2020-27722

In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption...

F5 GE APM Resource Management Error Vulnerability

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A resource management error vulnerability exists in F5 BIG-IP APM, which can be exploited by an attacker to trigger a denial of service via an...

F5 Networks BIG-IP : BIG-IP APM VDI plugin vulnerability (K73657294)

Under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption.CVE-2020-27722 Impact This affects only a BIG-IP APM virtual server configured with a Virtual Desktop InfrastructureVDI profile. Your BIG-IP system affected by this...

CVE-2020-8270

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342...

Citrix Security Advisory for TCP/IP Reassembly Resource Exhaustion

Description of Problem Several vulnerabilities in TCP/IP reassembly commonly known as SegmentSmack and FragmentSmack have recently been disclosed. SegmentSmack is CVE-2018-5390 for Linux and CVE-2018-6922 for FreeBSD. FragmentSmack is CVE-2018-5391 for Linux and CVE-2018-6923 for FreeBSD. These...

CVE-2020-3588

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

CVE-2020-3588

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

Input validation

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

CVE-2020-3588

CVE-2020-3588 affects Cisco Webex Meetings Desktop App for Windows in virtual desktop environments. The root cause is improper validation of messages processed by the virtualization channel interface, allowing a local attacker with limited privileges to execute arbitrary code with the user’s priv...

CVE-2020-3588 Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment...

NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...

Huawei FusionAccess Command Execution Vulnerability

Huawei FusionAccess is a virtual desktop application based on Huawei Cloud Platform from Huawei, China. A security vulnerability exists in Huawei FusionAccess version 6.5.1. The vulnerability stems from a command being authorized with incorrect privileges. An attacker could exploit the...

Keyboard and Language (IME) Does Not Sync from Local to VDA

When the user configures Receiver for Windows Advanced Preferences Keyboard and Language Bar Set "Keyboard" to Yes; Manual switch from "Chinese" to "English" or user "Ctrl + Shift" to switch input Keyboard and Language does not sync from local to VDA...