Ivanti Secure Access Client vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20248
3. 20252
4. 20263

Newest CVEs

• CVE-2026-8992

  An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary…

  ivanti · Secure Access Client

  High8.8
• CVE-2026-7432

  A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM

  ivanti · Secure Access Client

  High7.8
• CVE-2026-7431

  An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify…

  ivanti · Secure Access Client

  Medium4.4
• CVE-2025-22454

  Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

  Ivanti · Secure Access Client

  High7.8
• CVE-2024-13813

  Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files.

  Ivanti · Secure Access Client

  High7.1
• CVE-2024-29211

  A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files.

  Ivanti · Secure Access Client

  High7.1
• CVE-2024-38654

  Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of…

  Ivanti · Secure Access Client

  Medium4.4
• CVE-2024-37398

  Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

  Ivanti · Secure Access Client

  High7.8
• CVE-2024-7571

  Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

  Ivanti · Secure Access Client

  High7.8
• CVE-2024-9843

  A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.

  Ivanti · Secure Access Client

  Medium5.0