Virtual apps and desktops

This hub aggregates every CVE we track for Virtual apps and desktops, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Virtual apps and desktops.

• CVE-2025-6759Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges7.8Jul 8, 2025
• CVE-2024-6151Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges7.8Jul 10, 2024
• CVE-2023-6184Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting5.0Jan 18, 2024
• CVE-2023-24490Users with only access to launch VDA applications can launch an unauthorized desktop6.3Jul 10, 2023
• CVE-2023-24483Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA7.8Feb 16, 2023
• CVE-2021-22928A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Managemen...7.8Aug 5, 2021
• CVE-2020-8283An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX28...8.8Dec 14, 2020
• CVE-2020-8270An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 ...8.8Nov 16, 2020
• CVE-2020-8269An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX28534...8.8Nov 16, 2020