CVE-2026-84419: Out-of-Bounds Write

Q: Which Citrix Workspace app for Windows releases need to be updated?

Affected releases are those before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1. Update to the applicable fixed release or later.

Q: Is there a documented workaround if an update cannot be installed immediately?

The provided information does not identify any workaround or mitigation. The available remediation is to move to an unaffected release.

Published Oct 13, 2026

Updated

Out-of-bounds write vulnerability in Citrix Workspace app for Windows.

This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.

Affected Software

1 affected component

Citrix Workspace app for Windows<2603.20 CR, <2607 Hotfix 1, <2507 CU3 Hotfix 1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Citrix Workspace app for Windows to a version that resolves this vulnerability.
Fixed in 2603.20 CR

Event History

Oct 13, 2026

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

DescriptionWeakness

Frequently Asked Questions

Which Citrix Workspace app for Windows releases need to be updated?

Affected releases are those before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1. Update to the applicable fixed release or later.

Is there a documented workaround if an update cannot be installed immediately?

The provided information does not identify any workaround or mitigation. The available remediation is to move to an unaffected release.