CVE-2020-8270

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342...

Citrix Virtual Apps and Desktops multiple vulnerabilities (CTX285059)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 7 2006 or prior to 1912 LTSR CU1. It is, therefore, affected by multiple vulnerabilities: - An authenticated user on a multi-session VDA can perform arbitrary command execution as SYSTEM. CVE-2020-826...

CVE-2020-8270

creationtimestamp| type| source ---|---|--- 2021-02-01 14:56:23+00:00| seen| MISP/40f8e511-0605-4f1c-8112-5fe43ed25af0 2026-07-11 06:15:04+00:00| seen| MISP/40f8e511-0605-4f1c-8112-5fe43ed25af0 2026-07-12 00:15:02+00:00| seen| MISP/40f8e511-0605-4f1c-8112-5fe43ed25af0...

VulnCheck KEV: CVE-2020-8270

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342...

Citrix Virtual Apps and Desktops Security Update

Description of Problem Vulnerabilities havebeen identified in CitrixVirtual Apps and Desktopsthat could, if exploited,result in: An authenticateduserof amulti-sessionWindowsVDA, who has been granted permission to write to c:\ root directory, being able toescalatetheir privilege levelon that...

CVE-2020-8270

An unprivileged Windows user on a Virtual Delivery Agent (VDA) with Citrix App-V Service installed, or an SMB user connected to such a VDA, can perform arbitrary command execution as SYSTEM . The root cause is CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command I...