CVE-2025-59596

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - SecurityResponse@netmotionsoftware.com

Published

2025-11-04

Last modified

2026-10-18

Weaknesses

CWE-20

Affected products

• Secure Access (Absolute)
• Secure Access (Absolute Security)

References

• https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-59596