CVE-2022-21827

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
n/a	Citrix Gateway Windows Plugin	Citrix Gateway Plug-in for Windows versions before 21.9.1.2

References

https://support.citrix.com/article/CTX341455Vendor Advisory
https://support.citrix.com/article/CTX341455Vendor Advisory

Timeline

Published: May 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-218287.2A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a uns CVE-2022-218299.8Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which c CVE-2022-21837.8Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-218306.1A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pasting malicious code in CVE-2022-218319.8A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing argu CVE-2022-218337.8Virtual Machine IDE Drive Elevation of Privilege Vulnerability CVE-2022-218347.8Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability CVE-2022-218357.8Microsoft Cryptographic Services Elevation of Privilege Vulnerability CVE-2022-218367.8Windows Certificate Spoofing Vulnerability CVE-2022-218378.8Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2022-218387.8Windows Cleanup Manager Elevation of Privilege Vulnerability CVE-2022-218395.5Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability