CVE-2024-6151

CVE-2024-6151 is a Local Privilege Escalation in the Windows Virtual Delivery Agent (VDA) used by Citrix Virtual Apps and Desktops and Citrix DaaS. The bulletin CTX678035 states affected versions are: Current Release (CR) before 2402; 1912 LTSR before CU9; 2203 LTSR before CU5. Fixes are availabl...

CVE-2023-24483

CVE-2023-24483 affects Citrix Virtual Apps and Desktops Windows VDA. The bulletin CTX477616 states the vulnerability is a Privilege Escalation to NT AUTHORITY\SYSTEM via improper privilege management (CWE-269) on a local Windows user session. Affected are Citrix Virtual Apps and Desktops versions...

CVE-2020-8269

CVE-2020-8269 is a high-severity vulnerability in Citrix Virtual Apps and Desktops (CVAD) where an authenticated user on a multi-session Windows VDA can achieve arbitrary command execution as SYSTEM . The root cause is improper privilege management (CWE-269), specifically allowing an attacker wit...

CVE-2023-6184

CVE-2023-6184 – Citrix Session Recording XSS : The Citrix Session Recording component is affected by a cross-site scripting vulnerability. Affected: Citrix Session Recording on current Release (CR) versions prior to 2311, and Long Term Service Release (LTSR) versions prior to CU8 hotfix 19.12.810...

CVE-2021-22928

Summary: CVE-2021-22928 is a local privilege-escalation vulnerability in Citrix Virtual Apps and Desktops (VDA) when Citrix Profile Management or the Citrix Profile Management WMI Plugin is installed. The root cause is related to improper access control allowing a user on a Windows VDA to elevate...

CVE-2020-8270

An unprivileged Windows user on a Virtual Delivery Agent (VDA) with Citrix App-V Service installed, or an SMB user connected to such a VDA, can perform arbitrary command execution as SYSTEM . The root cause is CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command I...

CVE-2023-24490

CVE-2023-24490 affects Citrix Virtual Apps and Desktops Windows Virtual Delivery Agent (VDA). The issue is improper access control that allows users with only VDA-launch permissions to start an unauthorized desktop. Documented in Citrix CTX559370 and mirrored by Red Hat/NVD entries; impact is una...

CVE-2020-8283

An authorized user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution with SYSTEM privileges. This vulnerability exists in Citrix Virtual Apps and Desktops (CVAD) versions prior to 2009 , 1912 LTSR CU1 (before hotfixes CTX285870 and CTX286120), 7.15 LT...

CVE-2025-6759

CVE-2025-6759 affects Citrix Virtual Apps and Desktops — specifically the Windows Virtual Delivery Agent (VDA) used by CVAD and Citrix DaaS. The root cause is an open process handle with full access leaking from SYSTEM-owned GfxMgr.exe into a less-privileged processCtxGfx.exe, allowing a low-priv...