CVE-2025-6759

Published: Jul 8, 2025Modified: Aug 6, 2025

7.3

Vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: secure@citrix.com (Secondary)

Description

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS

Affected (4)

Products: Citrix: Virtual Apps And Desktops

Citrix

1 product

Virtual Apps And Desktops

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Citrix Virtual Apps And Desktops	Before 2503
Citrix Virtual Apps And Desktops	Version 2402
Citrix Virtual Apps And Desktops	Version 2402 cu1
Citrix Virtual Apps And Desktops	Version 2402 cu2

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694820

Source: secure@citrix.com

Vendor Advisory

Timeline

No history available yet.