Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,150All CVEsplus 19,142 rejected
- 217Last 24 hours3,232 in the last 7 days
- 16,932Last 30 days1,558 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 6 | 0 | 0 | 8 | 46 |
| 2025 | 0 | 3 | 2 | 0 | 0 | 5 | 38 |
| 2024 | 0 | 4 | 7 | 0 | 0 | 11 | 33 |
| 2023 | 4 | 5 | 5 | 0 | 0 | 14 | 22 |
| 2022 | 2 | 2 | 4 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-53564 | Arbitrary file read and writeCitrix · UniconOS | Medium5.1 |
| CVE-2026-53563 | Persistent Command ExecutionCitrix · UniconOS | Medium6.9 |
| CVE-2026-84419 | Out-of-Bounds WriteCitrix · Workspace app for Windows | Medium6.8 |
| CVE-2026-53562 | Local Privilege EscalationCitrix · UniconOS | High8.5 |
| CVE-2026-78547 | Out-of-Bounds WriteCitrix · Citrix Workspace app for Windows | Medium4.4 |
| CVE-2026-18751 | Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751Citrix · WorkSpace App | Medium5.2 |
| CVE-2026-53566 | Out-of-bounds memory readCitrix · Citrix Secure Access Client for Windows | Medium6.8 |
| CVE-2026-53565 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Secure Access Client for Windows | High8.5 |
| CVE-2025-6759 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Windows Virtual Delivery Agent for CVAD and Citrix DaaS | High7.3 |
| CVE-2025-0320 | Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Secure Access Client for Windows | High8.6 |
| CVE-2025-4879 | Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Workspace App for Windows | High7.3 |
| CVE-2025-1223 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataCitrix · Secure Access Client for Mac | Medium5.8 |
| CVE-2025-1222 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataCitrix · Secure Access Client for Mac | Medium5.8 |
| CVE-2024-8068 | Privilege escalation to NetworkService Account accessExploitedPublic exploitCitrix · Citrix Session Recording | Medium5.1 |
| CVE-2024-7890 | Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows | Medium5.4 |
| CVE-2024-7889 | Local privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows | High7.0 |
| CVE-2024-6677 | Privilege escalation in uberAgentCitrix · uberAgent | High7.3 |
| CVE-2024-6149 | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5Citrix · Citrix Workspace app for HTML5 | Medium4.8 |
| CVE-2024-6148 | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5Citrix · Citrix Workspace app for HTML5 | Medium5.3 |
| CVE-2024-6150 | A non-admin user can cause short-term disruption in Target VM availability in Citrix ProvisioningCitrix · Citrix Provisioning | Medium4.8 |
| CVE-2024-6286 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Citrix Workspace app for Windows | High8.5 |
| CVE-2024-6151 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix · Windows Virtual Delivery Agent | High8.5 |
| CVE-2024-5661 | Potential Denial of Service affecting XenServer and Citrix HypervisorCitrix · Citrix Hypervisor | Medium6.0 |
| CVE-2024-2049 | Server-Side Request Forgery (SSRF)Citrix · Citrix SD-WAN Standard/Premium Editions | Medium6.5 |
| CVE-2023-4966 | Unauthenticated sensitive information disclosureExploitedPublic exploitCitrix · NetScaler ADC | Critical9.4 |
| CVE-2023-3467 | Privilege Escalation to root administrator (nsroot)Citrix · NetScaler ADC | High8.0 |
| CVE-2023-3466 | Reflected Cross-Site Scripting (XSS)Citrix · NetScaler ADC | High8.3 |
| CVE-2023-3519 | Unauthenticated remote code executionExploitedPublic exploitCitrix · NetScaler ADC | Critical9.8 |
| CVE-2023-24492 | A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a…Citrix · Citrix Secure Access client for Ubuntu | Critical9.6 |
| CVE-2023-24491 | A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with…Citrix · Citrix Secure Access client for Windows | High7.8 |
| CVE-2023-24489 | A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to…ExploitedPublic exploitCitrix · Citrix ShareFile Storage Zones Controller | Critical9.8 |
| CVE-2023-24490 | Users with only access to launch VDA applications can launch an unauthorized desktopCitrix · Virtual Delivery Agents for Windows for CVAD and Citrix DaaS Security | Medium6.3 |
| CVE-2023-24487 | Arbitrary file readCitrix · Citrix ADC and Citrix Gateway | Medium6.3 |
| CVE-2023-24488 | Cross site scriptingCitrix · Citrix ADC and Citrix Gateway | Medium6.1 |
| CVE-2023-24486 | Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applicationsCitrix · Citrix Workspace app for Linux | Medium5.5 |
| CVE-2023-24485 | Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for WindowsCitrix · Citrix Workspace App for Windows | High7.8 |
| CVE-2023-24484 | A malicious user can cause log files to be written to a directory that they do not have permission to write to.Citrix · Citrix Workspace App for Windows | Medium5.5 |
| CVE-2023-24483 | Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDACitrix · Citrix Virtual Apps and Desktops | High7.8 |
| CVE-2022-27518 | Unauthenticated remote arbitrary code executionExploitedPublic exploitCitrix · Citrix Gateway, Citrix ADC | Critical9.8 |
| CVE-2022-27516 | User login brute force protection functionality bypassCitrix · Citrix Gateway, Citrix ADC | Medium5.3 |
| CVE-2022-27510 | Unauthorized access to Gateway user capabilitiesCitrix · Citrix Gateway, Citrix ADC | Critical9.8 |
| CVE-2022-27513 | Remote desktop takeover via phishingCitrix · Citrix Gateway, Citrix ADC | High8.3 |
| CVE-2022-27512 | Temporary disruption of the ADM license serviceCitrix · Citrix Application Delivery Management (Citrix ADM) | Medium5.3 |
| CVE-2022-27511 | Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator passwordCitrix · Citrix Application Delivery Management (Citrix ADM) | High8.1 |
| CVE-2022-27503 | Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9Citrix · StoreFront | Medium6.1 |
| CVE-2022-26355 | Citrix Federated Authentication Service (FAS)Citrix · Federated Authentication Service (FAS) | Medium4.4 |