End of life: 8/17/2029, End of support: 8/17/2029, Latest version: 2607
End of life: 10/30/2027, End of support: 10/30/2026, Latest version: 2603
End of life: 6/29/2027, End of support: 6/29/2026, Latest version: 2511 Update 3
End of life: 8/18/2028, End of support: 8/18/2028, Latest version: 2507 CU2
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS
End of life: 10/29/2026, End of support: 10/29/2025, Latest version: 2503
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS
End of life: 3/23/2027, End of support: 3/23/2027, Latest version: 2203 CU7 Update 4
End of life: 3/23/2027, End of support: 3/23/2027, Latest version: 2203 CU7 Update 4
End of life: 4/15/2029, End of support: 4/15/2029, Latest version: 2402 CU4 Update 1
End of life: 4/15/2029, End of support: 4/15/2029, Latest version: 2402 CU4 Update 1
Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting
End of life: 6/20/2025, End of support: 4/20/2024, Latest version: 2311
End of life: 6/20/2025, End of support: 4/20/2024, Latest version: 2311
Users with only access to launch VDA applications can launch an unauthorized desktop
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9
End of life: 3/29/2022, End of support: 3/29/2021, Latest version: 2009
End of life: 3/29/2022, End of support: 3/29/2021, Latest version: 2009
End of life: 12/17/2021, End of support: 12/17/2020, Latest version: 2006
End of life: 12/17/2021, End of support: 12/17/2020, Latest version: 2006
End of life: 9/26/2021, End of support: 9/26/2020, Latest version: 2003
End of life: 9/26/2021, End of support: 9/26/2020, Latest version: 2003
End of life: 12/18/2024, End of support: 12/18/2024, Latest version: 1912 CU10
End of life: 12/18/2024, End of support: 12/18/2024, Latest version: 1912 CU10
Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.
Citrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1), and Citrix XenApp 7.5 and 7.6 allow attackers to set Access Policy rules on the XenDesktop Delivery Controller via unspecified vectors.