TI-2026-73735 Aliases CVE-2026-84419 GHSA-qw7v-gw84-qm4v

Out-of-bounds write in Citrix Workspace app for Windows

LOW 29CWE-787Published 2026-10-13 · Updated 2026-10-15

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

Citrix Workspace app for Windows versions before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1 contain an out-of-bounds write flaw (CWE-787). A local user with low privileges can write data past the end of a buffer, corrupting memory and affecting availability. Exploitation is not reported in the sources.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00134 2nd percentileScored 2026-11-07

Fix Fixed Workspace app for Windows (Citrix): 2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Citrix	Workspace app for Windows	before 2603.20 CR; before LTSR 2607 Hotfix 1; before LTSR 2507 CU3 Hotfix 1	2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1	Patch available	CNA

Workspace app for Windows VendorCitrix Affected before 2603.20 CR; before LTSR 2607 Hotfix 1; before LTSR 2507 CU3 Hotfix 1 Fixed in 2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1 Patch available CNA

Remediation

Upgrade Citrix Workspace app for Windows to 2603.20 CR, LTSR 2607 Hotfix 1, or LTSR 2507 CU3 Hotfix 1, depending on the branch in use.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Fix · CNA Workspace app for Windows (Citrix) Fixed in 2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1

Timeline

2026-10-13 Threatist record created from CVE-2026-84419
2026-10-14 Alias added: GHSA-qw7v-gw84-qm4v
2026-10-14 Priority changed: MEDIUM → LOW
2026-10-16 CISA SSVC decision points changed

References

Other 1

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181

TI-2026-60195 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service KEVCVSS 4.0CRITICAL 9.5
TI-2026-60194 Improper input validation in Citrix ADC KEVCVSS 4.0CRITICAL 9.5
TI-2023-10110 Improper access control in Citrix ShareFile Storage Zones Controller KEVCVSS 3.1CRITICAL 9.8
TI-2023-04571 Unauthenticated sensitive information disclosure in Citrix NetScaler ADC KEVCVSS 3.1CRITICAL 9.4
TI-2023-03284 Unauthenticated remote code execution in Citrix NetScaler ADC KEVCVSS 3.1CRITICAL 9.8
TI-2022-10528 Unauthenticated remote arbitrary code execution in Citrix Gateway, Citrix ADC KEVCVSS 3.1CRITICAL 9.8

See all 418 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences