Receiver Security Vulnerabilities - January

CVE-2012-4603

Citrix XenApp Online Plug-in for Windows 12.1 and earlier, and Citrix Receiver for Windows 3.2 and earlier could allow remote attackers to execute arbitrary code by convincing a target to open a specially crafted file from an SMB or WebDAV fileserver.

CVE-2019-11634

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.