CVE-2026-84419
MediumCVSS 6.8Summary
An out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects versions before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Risk Assessment
An attacker could exploit the vulnerability to overwrite memory, potentially leading to arbitrary code execution or application crash.
Recommendation
Update Citrix Workspace app to version 2603.20 CR, LTSR 2607 Hotfix 1, or LTSR 2507 CU3 Hotfix 1 or later.
Other vulnerabilities in Citrix Workspace app
See all- CVE-2026-84420Medium
An out-of-bounds read vulnerability in Citrix Workspace app for Windows. This issue affects versions before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.
- CVE-2019-11634CriticalActively exploited
Citrix Workspace App before 1904 for Windows has an incorrect access control vulnerability, potentially allowing unauthorized access to resources.
- CVE-2026-18751Medium
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
Original NVD description (English source)
Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS