Citrix vulnerabilities

46 published CVEs name Citrix among the affected products; CISA lists 5 of them as exploited in the wild.

Critical 6High 16Medium 24Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2024-8068
Privilege escalation to NetworkService Account access
Citrix · Citrix Session Recording
ExploitedMedium5.1
CVE-2023-4966
Unauthenticated sensitive information disclosure
Citrix · NetScaler ADC
ExploitedCritical9.4
CVE-2023-24489
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to…
Citrix · Citrix ShareFile Storage Zones Controller
ExploitedCritical9.8
CVE-2023-3519
Unauthenticated remote code execution
Citrix · NetScaler ADC
ExploitedCritical9.8
CVE-2022-27518
Unauthenticated remote arbitrary code execution
Citrix · Citrix Gateway, Citrix ADC
ExploitedCritical9.8

CVE-2026-53564
Arbitrary file read and write
Citrix · UniconOS
Medium5.1
CVE-2026-53563
Persistent Command Execution
Citrix · UniconOS
Medium6.9
CVE-2026-84419
Out-of-Bounds Write
Citrix · Workspace app for Windows
Medium6.8
CVE-2026-53562
Local Privilege Escalation
Citrix · UniconOS
High8.5
CVE-2026-78547
Out-of-Bounds Write
Citrix · Citrix Workspace app for Windows
Medium4.4
CVE-2026-18751
Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
Citrix · WorkSpace App
Medium5.2
CVE-2026-53566
Out-of-bounds memory read
Citrix · Citrix Secure Access Client for Windows
Medium6.8
CVE-2026-53565
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Citrix · Secure Access Client for Windows
High8.5
CVE-2025-6759
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Citrix · Windows Virtual Delivery Agent for CVAD and Citrix DaaS
High7.3
CVE-2025-0320
Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Citrix · Secure Access Client for Windows
High8.6