Citrix Secure Access Client Mac: Privilege Escalation via Local Modifications
CVE-2025-1223 Published on February 20, 2025

An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac

NVD

Weakness Type

What is a DLL preloading Vulnerability?

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVE-2025-1223 has been classified to as a DLL preloading vulnerability or weakness.


Products Associated with CVE-2025-1223

Want to know whenever a new CVE is published for Citrix Secure Access Client? stack.watch will email you.

 

Affected Versions

Citrix Secure Access Client for Mac:

Exploit Probability

EPSS
0.04%
Percentile
9.91%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.