CVE-2023-24485: Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-16 · updated 2026-06-17
Weakness: CWE-284

Description

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

Affected products

Citrix Workspace app for Windows: before 2212; 1912-cu1, 1912-cu1-hf1, 1912-cu2, 1912-cu3, 1912-cu4, 1912-cu5 (+2); 1912, 2203.1 — fixed in 2212
Citrix Workspace app for Windows: from Citrix Workspace App versions before 2212 — fixed in 2212, 1912 LTSR before CU7 Hotfix 2 (19.12.7002), 2203 LTSR before CU2

How to fix

Upgrade to a fixed version: Citrix Workspace app for Windows 2212; Citrix Workspace app for Windows 2212, 1912 LTSR before CU7 Hotfix 2 (19.12.7002), 2203 LTSR before CU2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-24485 or the next vulnerability affects your stack