Vulnerability in Citrix Workspace app for Windows

[ Description ]Official description

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.

[ Fixes ]Fixes and patches

• Security bulletin: Citrix CTX697187Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1310
• Security bulletin: Citrix CTX697181Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1310
• Security bulletin: Citrix CTX697170Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1310

[ Advisories ]Government CERT advisories

• CERT-FR14 Oct 2026CERTFR-2026-AVI-1310

  Multiple vulnerabilities in Citrix products Translated from French

  Multiple vulnerabilities have been discovered in Citrix products. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and remote denial of service.

  CVE-2026-102700CVE-2026-53563CVE-2026-84419+5 more CVEs
• BSI CERT-Bund13 Oct 2026WID-SEC-2026-3913

  Citrix Systems Workspace App: Multiple vulnerabilities allow an unspecified attack Translated from German

  CVE-2026-84419CVE-2026-84420

[ References ]References

• support.citrix.com/support-home/kbsearch/article