CVE-2024-7889 Local Priv Escal in Citrix Workspace App (Windows)
CVE-2024-7889 Published on September 11, 2024
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
Vulnerability Analysis
CVE-2024-7889 can be exploited with local system access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Improper Control of a Resource Through its Lifetime
The software does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.
Products Associated with CVE-2024-7889
Want to know whenever a new CVE is published for Citrix Workspace? stack.watch will email you.
Affected Versions
Citrix Workspace app for Windows:- Version Current Release (CR) and below 2405 is affected.
- Version Long Term Service Release (LTSR) and below 2402 LTSR CU1 is affected.
- Before 2405 is affected.
- Before 2402_cu1 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.