CVE-2023-24483

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Feb 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-244845.5A malicious user can cause log files to be written to a directory that they do not have permission to write to.CVE-2023-244857.8Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer runni CVE-2023-244865.5A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to CVE-2023-244877.5Arbitrary file read in Citrix ADC and Citrix Gateway CVE-2023-244886.1Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting CVE-2023-244899.8A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthent CVE-2023-24499.8The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the pl CVE-2023-244904.3Users with only access to launch VDA applications can launch an unauthorized desktop CVE-2023-244917.8A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with acce CVE-2023-244928.8A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely e CVE-2023-244935.7A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An au CVE-2023-244945.4A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it