Ivanti Secure Access Client vulnerabilities
15 published CVEs name Ivanti Secure Access Client among the affected products.
- 15Published CVEs15 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical12 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-8992
An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary…
ivanti · Secure Access Client
High8.8 - CVE-2026-7432
A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM
ivanti · Secure Access Client
High7.8 - CVE-2026-7431
An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify…
ivanti · Secure Access Client
Medium4.4 - CVE-2025-22454
Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
Ivanti · Secure Access Client
High7.8 - CVE-2024-13813
Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files.
Ivanti · Secure Access Client
High7.1 - CVE-2024-29211
A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files.
Ivanti · Secure Access Client
High7.1 - CVE-2024-38654
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of…
Ivanti · Secure Access Client
Medium4.4 - CVE-2024-37398
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
Ivanti · Secure Access Client
High7.8 - CVE-2024-7571
Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
Ivanti · Secure Access Client
High7.8 - CVE-2024-9843
A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.
Ivanti · Secure Access Client
Medium5.0