Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
Priority LOW 36CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-269.
Summary
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00265 18th percentileScored 2026-11-07
Fix Fixed Citrix Virtual Apps and Desktops (Citrix): 2212
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Citrix | Citrix Virtual Apps and Desktops | Citrix Virtual Apps and Desktops to before 2212 | 2212 | Patch available | CNA |
- Citrix Virtual Apps and Desktops VendorCitrix Affected Citrix Virtual Apps and Desktops to before 2212 Fixed in 2212 Patch available CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:* | before 2212 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:* | 1912 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:* | 1912 cu1 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:* | 1912 cu2 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:* | 1912 cu3 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:* | 1912 cu4 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:* | 1912 cu5 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:* | 2203 | Vulnerable | Citrix |
| cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:* | 2203 cu1 | Vulnerable | Citrix |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:* Versions before 2212 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:* Versions 1912 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:* Versions 1912 cu1 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:* Versions 1912 cu2 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:* Versions 1912 cu3 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:* Versions 1912 cu4 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:* Versions 1912 cu5 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:* Versions 2203 Vulnerable ·Citrix
- cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:* Versions 2203 cu1 Vulnerable ·Citrix
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA Citrix Virtual Apps and Desktops (Citrix) Fixed in 2212
Timeline
- 2026-10-02 Threatist record created from CVE-2023-24483
- 2026-10-03 Alias added: GHSA-g58p-hgrm-327x
References
More Citrix Virtual Apps And Desktops vulnerabilities
- TI-2023-05679 Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting CVSS 3.1HIGH 7.2
- TI-2020-06687 OS command injection in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
- TI-2020-06700 Improper privilege management in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
- TI-2020-06686 Improper privilege management in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
- TI-2024-05700 Improper privilege management in Citrix Windows Virtual Delivery Agent CVSS 4.0HIGH 8.5
- TI-2025-06140 Improper privilege management in Citrix Windows Virtual Delivery Agent for CVAD and… CVSS 4.0HIGH 7.3
Sources
- CVE-2023-24483 · CVE Program
- CVE-2023-24483 · NVD
- FIRST EPSS
- GHSA-g58p-hgrm-327x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences