CVE-2019-11634

Timeline

Detection, updates, and resolution for this record.

1. May 22, 2019 · Catalog

   Detected

   Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Aug 11, 2026 · Catalog

   Updated

   Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

Affected

• cpe citrix/receiver4.9
• cpe citrix/workspaceversion unspecified
• vendor Citrix Workspace Application and Receiver for Windowsversion unspecified

Sources

• CISA KEVCVE-2019-11634

  Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

  cisa.gov
• CVE.orgCVE-2019-11634

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2019-11634

  30-day exploitation probability 8.1%

  first.org
• NIST NVDCVE-2019-11634

  Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Vendor Advisory · support.citrix.com
• Vendor Advisory · support.citrix.com
• US Government Resource · cisa.gov