CVE-2021-22907: Citrix Workspace

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.

Affected products

• Citrix Workspace: before 19.12.4000 (fixed in 19.12.4000); before 2105 (fixed in 2105)

Published 2021-05-27. Last modified 2026-06-17.