Known vulnerabilities in Ivanti Secure Access Client for Windows

Known vulnerabilities in Ivanti Secure Access Client for Windows

Vendor: Ivanti

Software: Ivanti Secure Access Client for Windows

Software CPE: cpe:2.3:a:ivanti:secure_access:*:*:*:*:*:*:*:*

Website: https://www.ivanti.com/

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU131189 - Incorrect Permission Assignment for Critical Resource CVE-2026-7431	CWE-732	Low	No	No	22.8R6	12.05.2026	SB2026051288
#VU131190 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-7432	CWE-362	Low	No	No	22.8R6	12.05.2026	SB2026051288
#VU105511 - Incorrect Permission Assignment for Critical Resource CVE-2025-22454	CWE-732	Low	No	No	22.7R4, 22.8R1	11.03.2025	SB2025031147
#VU103947 - Incorrect Permission Assignment for Critical Resource CVE-2024-13813	CWE-732	Low	No	No	22.8R1	13.02.2025	SB2025021312
#VU100510 - Incorrect Default Permissions CVE-2024-7571	CWE-276	Low	No	No	22.7R4	14.11.2024	SB2024111461
#VU100509 - Improper Verification of Cryptographic Signature CVE-2024-37398	CWE-347	Low	No	No	22.7R4	14.11.2024	SB2024111461
#VU100508 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-29211	CWE-362	Low	No	No	22.7R4	14.11.2024	SB2024111461
#VU100506 - Incorrect Permission Assignment for Critical Resource CVE-2024-9842	CWE-732	Low	No	No	22.7R4	14.11.2024	SB2024111461
#VU100505 - Buffer overflow CVE-2024-38654	CWE-120	Low	No	No	22.7R4	14.11.2024	SB2024111461
#VU100492 - Privilege Defined With Unsafe Actions CVE-2024-8539	CWE-267	Low	No	No	22.7R4	14.11.2024	SB2024111461
#VU89723 - Memory corruption CVE-2023-46810	CWE-119	Low	No	No	22.7R1	22.05.2024	SB2024052217
#VU89722 - Memory corruption CVE-2023-38042	CWE-119	Low	No	No	22.7R1	22.05.2024	SB2024052217