Skip to content
OpenAdvisories
Medium WID-SEC-2026-1323 10 CVEs

Absolute Secure Access: Mehrere Schwachstellen

Published Apr 29, 2026 · Updated May 3, 2026 · Revision 2 · de-DE

Vendor: Absolute Software Product: Secure Access

Summary

Ein Angreifer kann mehrere Schwachstellen in Absolute Secure Access ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Product

Absolute Secure Access ist eine Sicherheitslösung, die einen sicheren Netzwerkzugriff für Endgeräte ermöglicht, unabhängig von deren Standort.

Vulnerabilities 10

  • High 8.5
    CVE-2026-33451

    Arbitrary read/write vulnerability in Windows clients prior to 14.50

    CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.

    Absolute Software Secure Access
  • High 7.1
    CVE-2026-40950

    Buffer overflow in the Secure Access server prior to 14.50

    CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and cause a denial of service

    Absolute Software Secure Access
  • Medium 6.8
    CVE-2026-40949

    Buffer overflow in Windows clients prior to 14.50

    CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service.

    Absolute Software Secure Access
  • Medium 6.8
    CVE-2026-40951

    Memory corruption in Secure Access Windows clients prior to 14.50

    CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and trigger a denial of service.

    Absolute Software Secure Access
  • Medium 5.9
    CVE-2026-33452

    Buffer overflow in Windows clients prior to 14.50

    CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue screen’ the system.

    Absolute Software Secure Access
  • Medium 4.8
    CVE-2026-33448

    Format string vulnerability in MacOS clients prior to 14.50

    CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files pote…

    Absolute Software Secure Access
  • Low 2.3
    CVE-2026-33446

    Buffer overflow in client authentication prior to version 14.50

    CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to memory c…

    Absolute Software Secure Access
  • Low 2.3
    CVE-2026-33447

    CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers…

    Absolute Software Secure Access
  • Low 2.3
    CVE-2026-33449

    Message handler buffer overflow in clients prior to 14.50

    CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceiva…

    Absolute Software Secure Access
  • Low 2.3
    CVE-2026-33450

    Out of bounds read in Secure Access MacOS clients prior to 14.50

    CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client causing a denial of service.

    Absolute Software Secure Access

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-26431, EUVD-2026-26430, EUVD-2026-26429, EUVD-2026-26424, EUVD-2026-26423, EUVD-2026-26422, EUVD-2026-26421, EUVD-2026-26416, EUVD-2026-26415, EUVD-2026-26413

  2. #1

    Initiale Fassung

References