Absolute Secure_access
51 CVEs affecting Absolute Secure_access. Latest disclosed: 2026-07-15. Critical: 3, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33447 | Critical | 9.8 | 2026-04-30 | CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can… |
CVE-2026-33446 | Critical | 9.8 | 2026-04-30 | CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server… |
CVE-2025-49084 | Critical | 9.1 | 2025-07-31 | CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access can overwrit… |
CVE-2026-40952 | High | 7.8 | 2026-07-15 | CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local ac… |
CVE-2026-33451 | High | 7.8 | 2026-04-30 | CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows clien… |
CVE-2026-40957 | High | 7.5 | 2026-07-15 | o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site c… |
CVE-2026-33449 | High | 7.5 | 2026-04-30 | CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server ca… |
CVE-2026-0517 | High | 7.5 | 2026-01-17 | CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a s… |
CVE-2025-59595 | High | 7.5 | 2025-11-04 | CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can send a specially craf… |
CVE-2025-49080 | High | 7.5 | 2025-06-12 | There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Deni… |
CVE-2025-49083 | High | 7.2 | 2025-07-31 | CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administra… |
CVE-2026-40950 | Medium | 6.5 | 2026-04-30 | CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a speciall… |
CVE-2025-59596 | Medium | 6.5 | 2025-11-04 | CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local net… |
CVE-2024-37350 | Medium | 6.5 | 2024-06-20 | There is a cross-site scripting vulnerability in the policy management UI of Absolute Secure Access prior to version 13.06. Attackers can interfere with a syst… |
CVE-2025-54088 | Medium | 6.1 | 2025-10-02 | CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbit… |
CVE-2025-27703 | Medium | 6.0 | 2025-05-28 | CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrat… |
CVE-2026-33445 | Medium | 5.9 | 2026-07-15 | CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the… |
CVE-2026-33443 | Medium | 5.9 | 2026-07-15 | CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel… |
CVE-2026-40951 | Medium | 5.5 | 2026-04-30 | CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can s… |
CVE-2026-33452 | Medium | 5.5 | 2026-04-30 | CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can… |