November 3, 2021 · Applied Cybernetics Group
CVE-2019-11634 — Citrix Workspace Application and Receiver for Windows
known ransomware use
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
- Added to KEV
2021-11-03- Federal due date
2022-05-03- Vendor
- Citrix
- Product
- Workspace Application and Receiver for Windows
- EPSS
- 94.5th percentile (score 0.080, as of
2026-09-16) - NVD CVSS v3.1
- 9.8 (CRITICAL)
- Ransomware use
- Known
- ATT&CK
- T1003 , T1005 , T1046 , T1059 , T1078 , T1190 , T1486 · signal rollup
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2019-11634
CISA short description
Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
Required action
Apply updates per vendor instructions.
NVD description
Citrix Workspace App before 1904 for Windows has Incorrect Access Control.