CVE-2026-78547— Out-of-Bounds Write
Quick assessment
Affected
Citrix Citrix Workspace app for Windows
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Citrix Workspace 应用（Windows 版）中存在越界写入漏洞。 该问题影响以下版本的 Citrix Workspace 应用（Windows 版）：2603.11 当前版本（CR）之前、2507.1 LTSR CU3 之前，以及 LTSR 2607 之前。
Possible ATT&CK Techniques 1 AI
T1204 · User ExecutionAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Citrix | Citrix Workspace app for Windows | < 2603.11 Current Release (CR) |
affected |
< 2507.1 LTSR CU3 |
affected | ||
< LTSR 2607 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78547
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-Bounds Write
Source: CVE Program / CVE List V5
Vulnerability Description
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Citrix | Citrix Workspace app for Windows | 0 ~ 2603.11 Current Release (CR) | - |
|
II. Public POCs for CVE-2026-78547
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78547
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-78547 (1)
IV. Related Vulnerabilities
Same product: Citrix Workspace app for Windows
-
CVE-2024-7890
Local privilege escalation allows a low-privileged user to g -
CVE-2024-7889
Local privilege escalation allows a low-privileged user to g -
CVE-2024-6286
Local Privilege escalation allows a low-privileged user to g -
CVE-2023-24484
A malicious user can cause log files to be written to a dire -
CVE-2023-24485
Privilege Escalation on the system running a vulnerable vers
Same vendor: Citrix
-
CVE-2026-18751
Citrix Workspace App for Mac Security Bulletin for CVE-2026- -
CVE-2026-53566
Out-of-bounds memory read -
CVE-2026-53565
Local Privilege escalation allows a low-privileged user to g -
CVE-2025-6759
Local Privilege escalation allows a low-privileged user to g -
CVE-2025-0320
Citrix Secure Access - Local Privilege escalation allows a l
Same weakness: CWE-787
-
CVE-2026-89266
stb_vorbis through 1.22 heap buffer overflow via codebook mu -
CVE-2026-88053
Tesseract: Heap out-of-bounds write in Classify::ReadIntTemp -
CVE-2026-88051
Tesseract: Heap out-of-bounds write in GenericVector<T>::rea -
CVE-2026-88050
Tesseract: Out-of-bounds write in UnicharCompress via unvali -
CVE-2026-88049
Tesseract: Heap out-of-bounds write in LSTM::Forward via na_
V. Comments for CVE-2026-78547
No comments yet