TI-2026-73736 Aliases CVE-2026-84420 GHSA-48h6-7293-hxh6

Out-of-bounds read in Citrix Workspace app for Windows

LOW 25CWE-125Published 2026-10-13 · Updated 2026-10-14

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: High
Attack requirements: Present
Impact type: —
Confidentiality · integrity · availability: Low · Low · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Citrix Workspace app for Windows before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3 contains an out-of-bounds read flaw (CWE-125). The flaw lets a local user with low privileges read memory outside the intended buffer. Exploitation requires a high-complexity attack and user-level access, and the attack has a partial impact on confidentiality, integrity and availability of the vulnerable system.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00113 1st percentileScored 2026-11-07

Fix Fixed Citrix Workspace app for Windows (Citirx): 2603.20 CR, LTSR 2607, LTSR 2507 CU3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Citrix	Citrix Workspace app for Windows	before 2603.20 CR; before LTSR 2607; before LTSR 2507 CU3	2603.20 CR, LTSR 2607, LTSR 2507 CU3	Patch available	CNA

Citrix Workspace app for Windows VendorCitrix Affected before 2603.20 CR; before LTSR 2607; before LTSR 2507 CU3 Fixed in 2603.20 CR, LTSR 2607, LTSR 2507 CU3 Patch available CNA

Remediation

Upgrade Citrix Workspace app for Windows to 2603.20 CR, LTSR 2607, or LTSR 2507 CU3 or later.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Fix · CNA Citrix Workspace app for Windows (Citirx) Fixed in 2603.20 CR, LTSR 2607, LTSR 2507 CU3

Timeline

2026-10-13 Threatist record created from CVE-2026-84420
2026-10-14 Alias added: GHSA-48h6-7293-hxh6
2026-10-14 Priority changed: MEDIUM → LOW
2026-10-15 Weakness changed · CISA ADP
2026-10-15 CISA SSVC decision points changed

References

Other 1

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181

TI-2026-60195 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service KEVCVSS 4.0CRITICAL 9.5
TI-2026-60194 Improper input validation in Citrix ADC KEVCVSS 4.0CRITICAL 9.5
TI-2023-10110 Improper access control in Citrix ShareFile Storage Zones Controller KEVCVSS 3.1CRITICAL 9.8
TI-2023-04571 Unauthenticated sensitive information disclosure in Citrix NetScaler ADC KEVCVSS 3.1CRITICAL 9.4
TI-2023-03284 Unauthenticated remote code execution in Citrix NetScaler ADC KEVCVSS 3.1CRITICAL 9.8
TI-2022-10528 Unauthenticated remote arbitrary code execution in Citrix Gateway, Citrix ADC KEVCVSS 3.1CRITICAL 9.8

See all 418 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences