SB2026071530 - Multiple vulnerabilities in Citrix Secure Access Client and Citrix Endpoint Analysis Client for Windows

Description

This security bulletin contains information about 2 vulnerabilities.

1) Improper privilege management (CVE-ID: CVE-2026-53565)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to escalate privileges to SYSTEM.

The vulnerability exists due to improper privilege management in Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows when running on a local system. A local user can exploit the privilege management flaw to escalate privileges to SYSTEM.

2) Out-of-bounds read (CVE-ID: CVE-2026-53566)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to out-of-bounds read in Citrix Secure Access Client for Windows when processing memory on a local system. A local user can trigger the out-of-bounds read to disclose sensitive information.

Exploitation requires standard user access on the local system, and the DNE driver must not be installed.

Remediation

Install update from vendor's website.

References

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696734
• https://support.citrix.com/external/article/CTX696734/citrix-secure-access-client-for-wind.html