CVE-2021-22928

7.8 highEPSS 0.2%

High (7.8) in citrix. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
Published: 2021-08-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

citrix:virtual_apps_and_desktops
citrix:xenapp
citrix:xendesktop

References

https://support.citrix.com/article/CTX319750
https://support.citrix.com/article/CTX319750

Check your stack JSON