CVE-2026-78546: Out-of-Bounds Read

Affected releases are Citrix Workspace app for Windows versions before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

Update to 2603.11 CR or later, 2507.1 LTSR CU3 or later, or LTSR 2607 or later, as applicable to the release track in use.

Published Sep 11, 2026

Updated

Out-of-bounds read vulnerability in Citirx Workspace app for Windows.

This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

Affected Software

1 affected component

Citrix Workspace app for Windows<2603.11, <2507.1, <2607

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Citirx Workspace app for Windows to a version that resolves this vulnerability.
Fixed in 2603.11 Current Release (CR)
Upgrade
Upgrade Citirx Workspace app for Windows to a version that resolves this vulnerability.
Fixed in 2507.1 LTSR CU3
Upgrade
Upgrade Citirx Workspace app for Windows to a version that resolves this vulnerability.
Fixed in LTSR 2607

Sep 11, 2026

CVE Published

via MITRE·07:14 PM

Data Sourced

via MITRE·07:14 PM

DescriptionWeakness

Affected releases are Citrix Workspace app for Windows versions before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

Update to 2603.11 CR or later, 2507.1 LTSR CU3 or later, or LTSR 2607 or later, as applicable to the release track in use.