Citrix Virtual Apps 1912

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

Users with only access to launch VDA applications can launch an unauthorized desktop