PatchTheCVEworkspace vulnerabilities and fixes
Recent CVEs affecting workspace, with upgrade or downgrade steps. 5 tracked.
workspace has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-06-17. Highest priority: CVE-2024-7889 (score 30/100).
- CVE-2025-4879 HIGH 7.8 UPGRADE Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for
- CVE-2024-7890 HIGH 7.3 UPGRADE Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for
- CVE-2024-7889 HIGH 7.3 UPGRADE Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for
- CVE-2024-42423 MEDIUM 6.1 DOWNGRADE Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability
- CVE-2023-42404 MEDIUM 4.9 DOWNGRADE OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution.
FAQ
How do I fix workspace vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is workspace being exploited right now?
None of the tracked workspace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which workspace CVE should I patch first?
CVE-2024-7889 currently ranks highest (30/100): Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for .