Medium severity · published Oct 13, 2026
CVE-2026-84420
Out-of-Bounds Write and Out-of-Bounds Read
5.8
CVSS
0.1%
EPSS
No
On KEV
Description
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CW
Citrix Workspace app for Windows · Citirx
before 2603.20 CR; before LTSR 2607; before LTSR 2507 CU3 · source: vendor