Absolute Software vulnerabilities
We track 7 vulnerabilities in Absolute Software products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest Absolute Software vulnerabilities
- 7.1 High severity
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to…
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time.
- 7.1 High severity
CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to…
CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service.
- 8.3 High severity
CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server…
CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server.
- 7.8 High severity
Secure Access: Out-of-bounds Read
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.
- 7.5 High severity
Secure Access: Stack-based Buffer Overflow
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceivab
- 9.8 Critical severity
Secure Access: Stack-based Buffer Overflow
CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to memory corru
- 9.8 Critical severity
Secure Access: Buffer Copy without Checking Size of Input
CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to memory co