Skip to content

Vulnerabilities of Ivanti Secure Access Client

Is your version affected?

CVE Summary Score Published
CVE-2026-8992 An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote… 8.8 High May 22, 2026
CVE-2026-7432 A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges… 7.8 High May 12, 2026
CVE-2026-7431 An incorrect permission assignment for critical resource of Ivanti Secure Access Client   before 22.8R6 allows a local… 4.4 Medium May 12, 2026
CVE-2025-22454 Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated… 7.8 High Mar 11, 2025
CVE-2024-13813 Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to… 7.1 High Feb 11, 2025
CVE-2024-38654 Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with… 4.4 Medium Nov 13, 2024
CVE-2024-37398 Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate… 7.8 High Nov 13, 2024
CVE-2024-29211 A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify… 7.1 High Nov 13, 2024
CVE-2024-7571 Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate… 7.8 High Nov 12, 2024
CVE-2024-9843 A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a… 5.0 Medium Nov 12, 2024
CVE-2024-9842 Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to… 7.3 High Nov 12, 2024
CVE-2024-8539 Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to… 7.1 High Nov 12, 2024
CVE-2023-38042 A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to… 7.8 High May 31, 2024
CVE-2023-35080 A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally… 8.8 High Nov 14, 2023
CVE-2023-38041 A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition 7.8 High Oct 25, 2023

Other Ivanti products