(CVE-2025-4879) Citrix Workspace App for Windows本地权限提升漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694718
• https://nvd.nist.gov/vuln/detail/CVE-2025-4879
• https://www.sentinelone.com/vulnerability-database/cve-2025-4879/
• https://www.rapid7.com/db/vulnerabilities/citrix-workspace-app-cve-2025-4879/
• https://www.cve.org/CVERecord?id=CVE-2025-4879
• https://www.tenable.com/plugins/nessus/240642
• https://support.citrix.com/external/article/CTX694718/citrix-workspace-app-for-windows-securit.html
• https://www.securityweek.com/critical-vulnerability-patched-in-citrix-netscaler/

Related Vulnerabilities

• Citrix-NetScaler /saml/login 信息泄露漏洞（CVE-2026-8451）
• PoCCVE-2026-55592: Dashy <= 4.3.6 - Reflected XSS via Workspace
• Citrix NetScaler ADC SAML IDP /wsfed/passive 信息泄露漏洞（CVE-2026-3055）
• Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)
• Paperclip AI /api/execution-workspaces 命令执行漏洞
• PoCCVE-2026-3055: Citrix NetScaler SAML IDP - Memory Overread
• Gradio /static//windows/win.ini 文件读取漏洞 （CVE-2026-28414）
• Citrix NetScaler 内存越界读取漏洞
• Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)
• PoCCVE-2019-13608: Citrix StoreFront Server - XML External Entity
• PoCCVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
• Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)
• Windows 11 PolicyConfiguration 计划任务特权提升漏洞（CVE-2025-60710）