Product by Absolute Software
Secure Access
21 known vulnerabilities in Secure Access (Absolute Software), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33446 | Buffer overflow in client authentication prior to version 14.50 | 9.8 | |
| Critical | CVE-2026-33447 | Absolute Software Secure Access: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2026-33451 | Arbitrary read/write vulnerability in Windows clients prior to 14.50 | 7.8 | |
| High | CVE-2026-33449 | Message handler buffer overflow in clients prior to 14.50 | 7.5 | |
| High | CVE-2026-40950 | Buffer overflow in the Secure Access server prior to 14.50 | 6.5 | |
| Medium | CVE-2026-40951 | Memory corruption in Secure Access Windows clients prior to 14.50 | 5.5 | |
| Medium | CVE-2026-40949 | Buffer overflow in Windows clients prior to 14.50 | 4.4 | |
| Medium | CVE-2026-33452 | Buffer overflow in Windows clients prior to 14.50 | 5.5 | |
| Medium | CVE-2026-33450 | Out of bounds read in Secure Access MacOS clients prior to 14.50 | 5.5 | |
| Medium | CVE-2024-40875 | Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52 | — | |
| Medium | CVE-2024-37350 | Absolute Software Secure Access: Cross-site Scripting | 6.5 | |
| Medium | CVE-2026-33448 | Format string vulnerability in MacOS clients prior to 14.50 | 3.3 | |
| Medium | CVE-2024-37346 | Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06 | 4.9 | |
| Medium | CVE-2024-37345 | Absolute Software Secure Access: Cross-site Scripting | 5.3 | |
| Medium | CVE-2024-37352 | Absolute Software Secure Access: Cross-site Scripting | 4.5 | |
| Medium | CVE-2024-37351 | Absolute Software Secure Access: Cross-site Scripting | 4.5 | |
| Medium | CVE-2024-37349 | Absolute Software Secure Access: Cross-site Scripting | 4.5 | |
| Medium | CVE-2024-37348 | Absolute Software Secure Access: Cross-site Scripting | 4.5 | |
| Medium | CVE-2024-37347 | Absolute Software Secure Access: Cross-site Scripting | 4.5 | |
| Medium | CVE-2024-37344 | Absolute Software Secure Access: Cross-site Scripting | 4.5 | |
| Medium | CVE-2024-37343 | Absolute Software Secure Access: Cross-site Scripting | 4.8 |