CVE-2024-44107: Ivanti Workspace Control

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.

Affected products

• Ivanti Workspace Control: before 10.18.99.0 (fixed in 10.18.99.0)

Published 2024-09-10. Last modified 2026-06-17.