Citrix · Workspace Application and Receiver for Windows
CVE-2019-11634
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
Explotada en ataques
Usada por ransomware
Crítica 9,8 Probabilidad de ataque: 8,1%
Qué es
Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
CISA: Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 3 de mayo de 2022
Más fallos explotados de Citrix
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 4 oct 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Alto 8,7 | 11% |
| 27 sept 2026 | Improper Input Validation | NetScaler | Crítica 9,5 | 82% |
| 27 sept 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Crítica 9,5 | 78% |
| 9 sept 2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | Crítica 9,3 | 33% |
| 26 ago 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | Alto 8,8 | 1,0% |
| 30 mar 2026 | Out-of-Bounds Read | NetScaler | Crítica 9,3 | 91% |
| 26 ago 2025 | Memory Overflow | NetScaler | Crítica 9,2 | 21% |
| 25 ago 2025 | Improper Privilege Management | Session Recording | Media 5,1 | 3,5% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.