CVE-2024-7889

CVSS 7.0v4.0pub. 2024-09-11upd. 2024-10-22

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

CVSS Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Citrix Workspace
APP
Citrix
2203.12402< 2203.1< 2405

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

LPE

CWE

NVD-CWE-noinfo

CWE-664

References

support.citrix.com/s/article/CTX691485-citrix-workspace…

Related vulnerabilities

CVE-2019-11634CRITICAL9.8⚠ KEVten sam produkt

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

CVE-2025-4879HIGH7.3ten sam produkt

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for ...

CVE-2024-6286HIGH8.5ten sam produkt

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for...

CVE-2023-24485HIGH7.8ten sam produkt

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations a...

CVE-2022-21825HIGH7.8ten sam produkt

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protect...