Actively exploited in the wild

Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Citrix - Workspace Application and Receiver for Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2019-11634

CriticalCVSS 9.8KEV

Published: 22/05/2019(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

8.03%

94th percentile - higher than 94% of all known CVEs

Summary

Citrix Workspace App before 1904 for Windows has an incorrect access control vulnerability, potentially allowing unauthorized access to resources.

Risk Assessment

Incorrect access control could allow users to access data or functions they are not authorized for, leading to confidentiality and integrity breaches.

Recommendation

Update Citrix Workspace App to version 1904 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.