CVE-2016-6493: Citrix Xenapp

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.

Affected products

• Citrix Xenapp: version 6.0.0.0 only; version 6.5.0.0 only; version 7.0.0.0 only; version 7.1.0.0 only; version 7.5.0.0 only; version 7.6.0.0 only; …
• Citrix Xendesktop: up to and including 7.8

Published 2016-08-19. Last modified 2026-06-17.