Citrix Workspace App for Windows Multiple Vulnerabilities (CTX697034)

The version of Citrix Workspace App installed on the remote Windows host is 2507 / 2507.1 LTSR prior to 2507.1 LTSR CU3, or a Current Release prior to 2603.11. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read vulnerability exists in Citrix Workspace app for Windows...

CVE-2026-78547: Out-of-bounds Write

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2026-78546: Out-of-bounds Read

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

CVE-2025-4879: Improper Privilege Management

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889: Improper Control of a Resource Through its Lifetime

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7890: Improper Privilege Management

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-6286: Improper Privilege Management

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

PT-2024-5736

Name of the Vulnerable Software and Affected Versions Citrix Workspace App for Windows affected versions not specified Description The issue is related to insecure privilege management in Citrix Workspace App for Windows. It allows a low-privileged user to gain SYSTEM privileges, enabling potenti...

CVE-2021-22907: Improper Access Control

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4...

Bidirectional URL redirection (client to server) does not work since Workspace app for Windows 1904

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Bidirectional URL redirection feature is not able to redirect URL from client to server since...

CVE-2020-8207: Improper Access Control

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...

PT-2020-20026

Name of the Vulnerable Software and Affected Versions Citrix Workspace app for Windows versions 1912 CU1 through 2006.1 Description The issue is related to improper access control, which can lead to privilege escalation and code execution when the automatic updater service is running...