https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5353.htmlhttps://patchthecve.com/cve/CVE-2025-5353.htmlWed, 17 Jun 2026 09:47:44 +0000HIGH 8.8: A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.https://patchthecve.com/cve/CVE-2025-22463.htmlhttps://patchthecve.com/cve/CVE-2025-22463.htmlWed, 17 Jun 2026 08:47:32 +0000HIGH 7.3: A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.https://patchthecve.com/cve/CVE-2025-22455.htmlhttps://patchthecve.com/cve/CVE-2025-22455.htmlWed, 17 Jun 2026 08:47:29 +0000HIGH 8.8: A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.https://patchthecve.com/cve/CVE-2024-8496.htmlhttps://patchthecve.com/cve/CVE-2024-8496.htmlWed, 17 Jun 2026 08:22:44 +0000HIGH 7.8: Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation.https://patchthecve.com/cve/CVE-2024-8012.htmlhttps://patchthecve.com/cve/CVE-2024-8012.htmlWed, 17 Jun 2026 08:21:40 +0000HIGH 7.8: An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.https://patchthecve.com/cve/CVE-2024-44107.htmlhttps://patchthecve.com/cve/CVE-2024-44107.htmlWed, 17 Jun 2026 07:52:19 +0000HIGH 8.8: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.https://patchthecve.com/cve/CVE-2024-44106.htmlhttps://patchthecve.com/cve/CVE-2024-44106.htmlWed, 17 Jun 2026 07:52:19 +0000HIGH 8.8: Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.https://patchthecve.com/cve/CVE-2024-44105.htmlhttps://patchthecve.com/cve/CVE-2024-44105.htmlWed, 17 Jun 2026 07:52:19 +0000HIGH 8.2: Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to obtain OS credentials.https://patchthecve.com/cve/CVE-2024-44104.htmlhttps://patchthecve.com/cve/CVE-2024-44104.htmlWed, 17 Jun 2026 07:52:18 +0000HIGH 8.8: An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.https://patchthecve.com/cve/CVE-2024-44103.htmlhttps://patchthecve.com/cve/CVE-2024-44103.htmlWed, 17 Jun 2026 07:52:18 +0000HIGH 8.8: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.