CVE-2026-84420
MediumCVSS 5.8Summary
An out-of-bounds read vulnerability in Citrix Workspace app for Windows. This issue affects versions before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.
Risk Assessment
An attacker could exploit the vulnerability to gain unauthorized access to memory data, potentially leading to disclosure of sensitive information.
Recommendation
Update Citrix Workspace app to version 2603.20 CR, LTSR 2607, or LTSR 2507 CU3 or later.
Other vulnerabilities in Citrix Workspace app
See all- CVE-2026-84419Medium
An out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects versions before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
- CVE-2019-11634CriticalActively exploited
Citrix Workspace App before 1904 for Windows has an incorrect access control vulnerability, potentially allowing unauthorized access to resources.
- CVE-2026-18751Medium
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
Original NVD description (English source)
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS