Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
CVE-2024-7889: Citrix Workspace app for Windows: Unauthorized SYSTEM access on Windows
CVE-2024-7889
Summary
The Citrix Workspace app for Windows has a vulnerability that allows a regular user to gain full control of the Windows system. This means an attacker could potentially access sensitive data and take control of the system. Citrix has released a patch to fix this issue, and users should update their app to the latest version to stay secure.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| citrix | workspace |
< 2203.1 2203.1 2402 < 2405 cpe:2.3:a:citrix:workspace:*:*:*:*:ltsr:windows:*:* |
Original title
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
Original description
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
nvd CVSS3.1
7.3
nvd CVSS4.0
7.0
Vulnerability type
CWE-664
Published: 11 Sep 2024 · Updated: 15 Jun 2026 · First seen: 7 Mar 2026