CVE-2026-84419— Out-of-Bounds Write
Quick assessment
Affected
Citrix Workspace app for Windows
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Citrix Workspace 应用 for Windows 存在越界写入漏洞。 该问题影响 Windows 版 Workspace 应用：在 2603.20 CR 之前版本、LTSR 2607 Hotfix 1 之前版本，以及 LTSR 2507 CU3 Hotfix 1 之前版本。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-84419
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-Bounds Write
Source: CVE Program / CVE List V5
Vulnerability Description
Out-of-bounds write vulnerability in Citrix Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Citrix | Workspace app for Windows | 0 ~ 2603.20 CR | - |
|
II. Public POCs for CVE-2026-84419
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-84419
请登录查看更多情报信息。
Other References for CVE-2026-84419 (1)
Same Patch Batch · Citrix · 2026-10-13 · 4 CVEs total
| CVE-2026-53562 | 8.5 HIGH | Local Privilege Escalation |
| CVE-2026-53563 | 6.9 MEDIUM | Persistent Command Execution |
| CVE-2026-53564 | 5.1 MEDIUM | Arbitrary file read and write |
IV. Related Vulnerabilities
Same weakness: CWE-787
-
CVE-2026-86573
Out-of-bounds Write Vulnerability in Hitachi Disk Array Driv -
CVE-2026-100128
Bridge | Out-of-bounds Write (CWE-787) -
CVE-2026-100129
Bridge | Out-of-bounds Write (CWE-787) -
CVE-2026-100127
Bridge | Out-of-bounds Write (CWE-787) -
CVE-2026-103821
Substance3D - Designer | Out-of-bounds Write (CWE-787)
V. Comments for CVE-2026-84419
No comments yet