Live › vulnerability › CVE-2019-11634
Go to dashboardCitrix Workspace Application and Receiver for Windows fail to enforce local drive access preferences, which allows remote code execution on the client. An attacker who can reach a user's session can run code on that Windows machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Citrix Workspace Application and Receiver for Windows | vendor | – | – |
Check the installed Citrix Workspace app or Receiver version under Programs and Features on each Windows client.
Update Citrix Workspace app or Receiver for Windows to the version fixed by Citrix, as CISA requires applying the vendor updates.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-11634")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.