AAbsolute Software

Products

Exploited and recent CVEs

• CVE-2026-116768 High 7.1 Missing length validation in Absolute Secure Access 0.3%
• CVE-2026-116767 High 7.1 Improper input handling in Secure Access servers 0.2%
• CVE-2026-116766 High 8.3 Improper input handling in Secure Access server 0.2%
• CVE-2026-40951 Medium 6.8 Memory corruption in Secure Access Windows clients prior to 14.50 <0.1%
• CVE-2026-40950 High 7.1 Buffer overflow in the Secure Access server prior to 14.50 0.2%
• CVE-2026-40949 Medium 6.8 Buffer overflow in Windows clients prior to 14.50 0.1%
• CVE-2026-33452 Medium 5.9 Buffer overflow in Windows clients prior to 14.50 <0.1%
• CVE-2026-33451 High 8.5 Arbitrary read/write vulnerability in Windows clients prior to 14.50 0.1%
• CVE-2026-33450 Low 2.3 Out of bounds read in Secure Access MacOS clients prior to 14.50 0.2%
• CVE-2026-33449 Low 2.3 Message handler buffer overflow in clients prior to 14.50 0.2%
• CVE-2026-33448 Medium 4.8 Format string vulnerability in MacOS clients prior to 14.50 0.1%
• CVE-2026-33447 Low 2.3 CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite 0.3%
• CVE-2026-33446 Low 2.3 Buffer overflow in client authentication prior to version 14.50 0.3%
• CVE-2024-40875 Medium 5.9 Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52 0.3%
• CVE-2024-37352 Medium 4.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37351 Medium 4.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37350 Medium 6.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37349 Medium 4.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37348 Medium 4.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37347 Medium 4.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37346 Medium 4.9 Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06 0.4%
• CVE-2024-37345 Medium 5.3 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.2%
• CVE-2024-37344 Medium 4.5 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.3%
• CVE-2024-37343 Medium 4.8 Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06 0.2%