Absolute Software Secure Access vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Absolute Software Secure Access: 10 record(s), with affected versions and fixes.
CVE-2026-40951
Medium · 5.5
CWE-400 Apr 30, 2026
Memory corruption in Secure Access Windows clients prior to 14.50
CVE-2026-40951 is a memory corruption vulnerability on Secure Access
Windows clients prior to 14.50. Attackers with local control of the
Windows client can send malformed data to an API and trigger a denial of
service.
CVE-2026-40950
Medium · 6.5
CWE-121 Apr 30, 2026
Buffer overflow in the Secure Access server prior to 14.50
CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access
server prior to 14.50. Attackers with control of a modified client can
send a specially crafted message to the server and cause a denial of
service
CVE-2026-40949
Medium · 4.4
CWE-121 Apr 30, 2026
Buffer overflow in Windows clients prior to 14.50
CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access
Windows client prior to 14.50. Attackers with local control of the
Windows client can use it to trigger a denial of service.
CVE-2026-33452
Medium · 5.5
CWE-121 Apr 30, 2026
Buffer overflow in Windows clients prior to 14.50
CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access
Windows client prior to 14.50. Attackers with local control of the
Windows client can use it to ‘blue screen’ the system.
CVE-2026-33451
High · 7.8
CWE-125 Apr 30, 2026
Arbitrary read/write vulnerability in Windows clients prior to 14.50
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure
Access Windows client prior to 14.50. Attackers with local control of
the Windows client can send malformed data to an API and elevate their
level of privilege to system.
CVE-2026-33450
Medium · 5.5
CWE-125 Apr 30, 2026
Out of bounds read in Secure Access MacOS clients prior to 14.50
CVE-2026-33450 is an out of bounds read vulnerability in the Secure
Access MacOS client prior to 14.50. Attackers with control of a modified
server can send a malformed packet to the client causing a denial of
service.
CVE-2026-33449
High · 7.5
CWE-121 Apr 30, 2026
Message handler buffer overflow in clients prior to 14.50
CVE-2026-33449 is a buffer overflow in a message handling function of
the Secure Access client prior to 14.50. Attackers with control of
a modified server can send a cryptographically valid message to the
client, overwriting a small portion of memory conceivably leading to a
denial of service.
CVE-2026-33448
Low · 3.3
CWE-200 Apr 30, 2026
Format string vulnerability in MacOS clients prior to 14.50
CVE-2026-33448 is a format string vulnerability in the logging subsystem
of Secure Access client for MacOS prior to 14.50. Attackers with
control of a modified server can force the client to dump the contents
of a small portion of memory to the log files potentially revealing
secrets.
CVE-2026-33447
Critical · 9.8
CWE-121 Apr 30, 2026
Stack-based Buffer Overflow in Absolute Secure Access
CVE-2026-33447 is a buffer overflow in a message parsing function of the
Secure Access client prior to 14.50. Attackers with control of a
modified server can send a special packet that can overwrite a small
portion of memory conceivably leading to memory corruption or denial of
service.
CVE-2026-33446
Critical · 9.8
CWE-120 Apr 30, 2026
Buffer overflow in client authentication prior to version 14.50
CVE-2026-33446 is a buffer overflow in the authentication sub-system of
the Secure Access client prior to 14.50. Attackers with control of a
modified server can send a special packet that can overwrite a small
portion of memory conceivably leading to memory corruption or a denial
of service.