Medium severity · published Oct 13, 2026
CVE-2026-84419
Out-of-Bounds Write
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
Out-of-bounds write vulnerability in Citrix Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Workspace app for Windows · Citrix
before 2603.20 CR; before LTSR 2607 Hotfix 1; before LTSR 2507 CU3 Hotfix 1 · source: vendor