Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges.
Product
citrix presentation server client vulnerabilities
3 published CVES affecting citrix presentation server client, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest citrix presentation server client CVEs
Newest publication first
-
LowCVSS 1.9 EPSS 0.29%
-
HighCVSS 9.3 EPSS 3.8%
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers.
-
MediumCVSS 6.8 EPSS 36.6% Public exploit
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.