CVE-2023-24491

CVE-2023-24491 is a local privilege escalation vulnerability in the Citrix Secure Access client for Windows. An attacker with standard user access on an affected endpoint can exploit this flaw to gain NT AUTHORITY\SYSTEM privileges. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable with low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, though it has received some community discussion and media coverage.