Description
Out-of-bounds write vulnerability in Citrix Workspace app for Windows.

This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Published: 2026-10-13
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Memory corruption
Action: Immediate Patch
AI Analysis

Impact

Citrix Workspace app for Windows contains an out-of-bounds write flaw that permits memory corruption. The defect, classified as CWE-787, can overwrite adjacent memory.

Affected Systems

Citrix Workspace app for Windows versions before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1 are affected.

Risk and Exploitability

The CVSS score of 6.8 indicates a medium-to-high risk, while the EPSS score of less than 1% implies a very low likelihood of exploitation at this time. The flaw is not listed in the CISA KEV catalog. The attack vector is not explicitly detailed but is inferred to require either local user interaction or a crafted payload that triggers the out-of-bounds write.

Generated by OpenCVE AI on October 16, 2026 at 02:17 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to Citrix Workspace app for Windows 2603.20 CR or later, LTSR 2607 Hotfix 1, or LTSR 2507 CU3 Hotfix 1, which contain the fix for the out-of-bounds write flaw.
  • If an immediate upgrade is not possible, restrict or disable features or data types that can trigger the flaw to reduce the attack surface.
  • Implement monitoring of application logs for abnormal memory accesses or crashes that could indicate exploitation attempts.

Generated by OpenCVE AI on October 16, 2026 at 02:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Citrix
Citrix workspace App For Windows
Vendors & Products Citrix
Citrix workspace App For Windows

Thu, 15 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
Description Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Title Out-of-Bounds Write
Weaknesses CWE-787
References
Metrics cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Citrix Workspace App For Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Citrix

Published:

Updated: 2026-10-15T16:43:51.461Z

Reserved: 2026-09-01T17:47:16.441Z

Link: CVE-2026-84419

cve-icon Vulnrichment

Updated: 2026-10-15T16:38:01.660Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T22:18:58.643

Modified: 2026-10-15T17:17:29.137

Link: CVE-2026-84419

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T21:20:09Z

Weaknesses