CVE-2016-6493

9.8 criticalEPSS 2.2%

Critical (9.8) in citrix. EPSS 2.2% chance of exploitation in the next 30 days.

Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2016-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

citrix:xenapp
citrix:xendesktop

References

http://support.citrix.com/article/CTX215460
http://www.securityfocus.com/bid/92316
http://www.securitytracker.com/id/1036539
http://support.citrix.com/article/CTX215460
http://www.securityfocus.com/bid/92316

Check your stack JSON