Secure Access (Absolute Software) - vulnerabilities (CVEs)
21 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-30. Vendor: Absolute Software.
CVEs of Secure Access
- CVE-2026-40951 - CVSS 6.8 (medium), 2026-04-30: CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can…
- CVE-2026-40950 - CVSS 7.1 (high), 2026-04-30: CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially…
- CVE-2026-40949 - CVSS 6.8 (medium), 2026-04-30: CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can…
- CVE-2026-33449 - CVSS 7.5 (high), 2026-04-30: CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can…
- CVE-2026-33452 - CVSS 5.9 (medium), 2026-04-30: CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can…
- CVE-2026-33451 - CVSS 8.5 (high), 2026-04-30: CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client…
- CVE-2026-33450 - CVSS 5.5 (medium), 2026-04-30: CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a…
- CVE-2026-33448 - CVSS 4.8 (medium), 2026-04-30: CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a…
- CVE-2026-33446 - CVSS 9.8 (critical), 2026-04-30: CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server…
- CVE-2026-33447 - CVSS 9.8 (critical), 2026-04-30: CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can…
- CVE-2024-40875 - CVSS 5.9 (medium), 2024-12-20: There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with system administrator…
- CVE-2024-37350 - CVSS 6.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the policy management UI of Absolute Secure Access prior to version 13.06. Attackers can interfere with a…
- CVE-2024-37352 - CVSS 4.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06 that allows attackers with system…
- CVE-2024-37351 - CVSS 4.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator…
- CVE-2024-37349 - CVSS 4.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator…
- CVE-2024-37348 - CVSS 4.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator…
- CVE-2024-37344 - CVSS 4.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the Policy management UI of Absolute Secure Access prior to version 13.06. Attackers with system…
- CVE-2024-37347 - CVSS 4.5 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the pool configuration component of the management UI of Absolute Secure Access prior to 13.06. Attackers…
- CVE-2024-37346 - CVSS 4.9 (medium), 2024-06-20: There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system…
- CVE-2024-37345 - CVSS 5.4 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the Secure Access administrative UI of Absolute Secure Access prior to version 13.06. Attackers can pass a…
- CVE-2024-37343 - CVSS 5.4 (medium), 2024-06-20: There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.06. Attackers with…
