DEBIAN-CVE-2026-40253

openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in the shared common library asn1.c accept a raw pointer but no buffer length parameter, and trust attacker-controlled BER length fields without validating them...

CVE-2025-12101 Cross-Site Scripting (XSS)

Cross-Site Scripting XSS in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

EUVD-2001-1173

Malware in sbrugna...

EUVD-2002-2404

Malware in sbrugna...

EUVD-2000-0243

Malware in sbrugna...

EUVD-2007-1193

Malware in sbrugna...

EUVD-2010-2992

Malware in sbrugna...

EUVD-2017-3840

Malware in sbrugna...

EUVD-2023-28504

Malicious code in bioql PyPI...

EUVD-2023-54803

Malicious code in bioql PyPI...

NetScaler Gateway-13.1-Launching ICA session got stuck with client authentication enabled

You may stuck at the ICA session launching process when you enable client authentication in Gateway virtual server...

Citrix Workspace App - RemotePC ICA session freezes intermittently

Users may experience a session freezing issue while working on the ICA session to Remote PC. They may also see black screen on the console of the Remote PC with unresponsive keyboard and mouse after disconnecting from the ICA connection. The machine can be recovered only by rebooting the Remote P...

CVE-2020-8217

A cross site scripting XSS vulnerability in Pulse Connect Secure 9.1R8 allowed attackers to exploit in the URL used for Citrix ICA...

Microsoft Edge taskbar icon may not appear when it is launched through Local App Access

When Microsoft Edge is launched in an ICA desktop session through Local App Access LAA, Microsoft Edge icon may not appear in Windows taskbar of the session. In the situation, if end user makes a mouse click on the background Windows desktop in the session, the foreground Microsoft Edge window wi...

Citrix Virtual Apps and Desktops - 3DExperience application crashes randomly inside ICA Session

Users might see that the 3DExperience.exe application from Dassault Systems crash randomly inside the ICA Session. The problem started after a major network outage...

Published Desktop Randomly Disconnects with Event ID 1 - ICA Client (Vanadium)

Users running on thin clients using the maximum supported monitors for the device, each at at the maximum supported resolution, may be disconnect from the Published Desktop at random.At the time of the disconnect the endpoint device event log records: Event ID 1 from source ICA Client Vanadium wi...

Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session

Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...

Citrix Virtual Apps and Desktops - MS Office processes crashes or gets stuck on close

When users open MS Access within ICA session and create a form it is one of the objects you can create within Access, save and then close the MSAccess UI, the UI goes away but the process MSAccess.exe remains in task manager consuming resources. The issue is specific to ICA session. The issue is...

Linux Virtual Delivery Agent - ICA session crashes when resizing

When resizing the ICA Session Window, users might see that the session crashes...

Cosmos: Replacing ICA active channel during the upgrade and a bit more

The active channel on the ICA controller was set during the channel acknowledgement, which was a check-then-act operation that was not atomic. The active channel on the ICA host was set during the channel open confirmation, but the check for the channel existence was not atomic. This allowed an...