Vulnerabilidades do Absolute Software Secure Access
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Absolute Software Secure Access: 10 registro(s), com versões afetadas e correções.
CVE-2026-40951
Média · 5.5
CWE-400 30/04/2026
Memory corruption in Secure Access Windows clients prior to 14.50
CVE-2026-40951 is a memory corruption vulnerability on Secure Access
Windows clients prior to 14.50. Attackers with local control of the
Windows client can send malformed data to an API and trigger a denial of
service.
CVE-2026-40950
Média · 6.5
CWE-121 30/04/2026
Buffer overflow in the Secure Access server prior to 14.50
CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access
server prior to 14.50. Attackers with control of a modified client can
send a specially crafted message to the server and cause a denial of
service
CVE-2026-40949
Média · 4.4
CWE-121 30/04/2026
Buffer overflow in Windows clients prior to 14.50
CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access
Windows client prior to 14.50. Attackers with local control of the
Windows client can use it to trigger a denial of service.
CVE-2026-33452
Média · 5.5
CWE-121 30/04/2026
Buffer overflow in Windows clients prior to 14.50
CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access
Windows client prior to 14.50. Attackers with local control of the
Windows client can use it to ‘blue screen’ the system.
CVE-2026-33451
Alta · 7.8
CWE-125 30/04/2026
Arbitrary read/write vulnerability in Windows clients prior to 14.50
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure
Access Windows client prior to 14.50. Attackers with local control of
the Windows client can send malformed data to an API and elevate their
level of privilege to system.
CVE-2026-33450
Média · 5.5
CWE-125 30/04/2026
Out of bounds read in Secure Access MacOS clients prior to 14.50
CVE-2026-33450 is an out of bounds read vulnerability in the Secure
Access MacOS client prior to 14.50. Attackers with control of a modified
server can send a malformed packet to the client causing a denial of
service.
CVE-2026-33449
Alta · 7.5
CWE-121 30/04/2026
Message handler buffer overflow in clients prior to 14.50
CVE-2026-33449 is a buffer overflow in a message handling function of
the Secure Access client prior to 14.50. Attackers with control of
a modified server can send a cryptographically valid message to the
client, overwriting a small portion of memory conceivably leading to a
denial of service.
CVE-2026-33448
Baixa · 3.3
CWE-200 30/04/2026
Format string vulnerability in MacOS clients prior to 14.50
CVE-2026-33448 is a format string vulnerability in the logging subsystem
of Secure Access client for MacOS prior to 14.50. Attackers with
control of a modified server can force the client to dump the contents
of a small portion of memory to the log files potentially revealing
secrets.
CVE-2026-33447
Crítica · 9.8
CWE-121 30/04/2026
Stack-based Buffer Overflow em Absolute Secure Access
CVE-2026-33447 is a buffer overflow in a message parsing function of the
Secure Access client prior to 14.50. Attackers with control of a
modified server can send a special packet that can overwrite a small
portion of memory conceivably leading to memory corruption or denial of
service.
CVE-2026-33446
Crítica · 9.8
CWE-120 30/04/2026
Buffer overflow in client authentication prior to version 14.50
CVE-2026-33446 is a buffer overflow in the authentication sub-system of
the Secure Access client prior to 14.50. Attackers with control of a
modified server can send a special packet that can overwrite a small
portion of memory conceivably leading to memory corruption or a denial
of service.