Citrix Workspace vulnerabilities

14 CVEs affecting Citrix Workspace, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4879, published 2025-06-17.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11634: Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability, published 2019-05-22. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 8.1% chance of exploitation in the next 30 days. Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
• CVE-2020-8207, published 2020-07-24. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.
• CVE-2024-6148, published 2024-07-10. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5
• CVE-2024-6286, published 2024-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
• CVE-2023-24484, published 2023-02-16. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A malicious user can cause log files to be written to a directory that they do not have permission to write to.
• CVE-2024-7889, published 2024-09-11. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
• CVE-2021-22907, published 2021-05-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.
• CVE-2024-6149, published 2024-07-10. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
• CVE-2022-21825, published 2022-02-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation.
• CVE-2023-24485, published 2023-02-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

Latest

• CVE-2025-4879, published 2025-06-17. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
• CVE-2024-7890, published 2024-09-11. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
• CVE-2024-42423, published 2024-09-10. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low…
• CVE-2023-24486, published 2023-07-10. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops…