CVE-2024-7890

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
CitrixCitrix Workspace app for Windows>= Current Release (CR) 0, < 2405; >= Long Term Service Release (LTSR) 0, < 2402 LTSR CU1
citrixworkspace_app< 2405
citrixworkspace_app< 2402_cu1

References

Timeline

Published
Sep 11, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-78914.8The Floating Contact Button WordPress plugin before 2.8 does not sanitise and escape some of its settings, which could allow high privilege CVE-2024-78924.3The adstxt Plugin WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers tCVE-2024-78945.3The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check onCVE-2024-78955.4The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in alCVE-2024-78968.8A vulnerability was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. It has been rated as critical. Affected by thiCVE-2024-78978.8A vulnerability classified as critical has been found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This affects an unCVE-2024-78989.8A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affeCVE-2024-78997.2A vulnerability, which was classified as critical, has been found in InnoCMS 0.3.1. This issue affects some unknown processing of the file /CVE-2024-79004.8A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /CVE-2024-79015.4A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality CVE-2024-79026.1A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic. Affected by this issue is some unknown functionality of thCVE-2024-79038.8A vulnerability was found in DedeBIZ 6.3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of
CVE-2024-7890: High severity, CVSS 7.3 | Vulnix