Is CVE-2026-84419 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-84419 being exploited in the wild.

How severe is CVE-2026-84419?

Informational severity, published 13 October 2026.

Which products and versions are affected?

Citrix Workspace app for Windows before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.

Is there a fix for CVE-2026-84419?

Yes: fixed in 2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Am I affected by CVE-2026-84419?

Check whether you run Citrix Workspace app for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-84419: Citrix Workspace app for Windows out-of-bounds write

CVE-2026-84419 · Severity: info · Published 2026-10-13

Citrix Workspace app for Windows, which enables remote access to corporate desktops and applications, contains an out-of-bounds write vulnerability. An attacker could exploit this to corrupt memory and potentially execute arbitrary code on affected systems.

Vendors: Citrix.

Quick answers

Is CVE-2026-84419 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-84419 being exploited in the wild.
How severe is CVE-2026-84419?: Informational severity, published 13 October 2026.
Which products and versions are affected?: Citrix Workspace app for Windows before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Is there a fix for CVE-2026-84419?: Yes: fixed in 2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-84419 attacked?: It is in a web application.
Am I affected by CVE-2026-84419?: Check whether you run Citrix Workspace app for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2603.20 CR, LTSR 2607 Hotfix 1, LTSR 2507 CU3 Hotfix 1

Technical details

An out-of-bounds write vulnerability exists in Citrix Workspace app for Windows, allowing an attacker to write data beyond allocated buffer boundaries. The vulnerability affects versions before 2603.20 CR, LTSR 2607 Hotfix 1, and LTSR 2507 CU3 Hotfix 1. Exploitation could lead to memory corruption and potential code execution.

Affected products

Citrix Workspace app for Windows before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1

Timeline

2026-10-13: disclosed

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.