CVE Program partner
Absolute
Absolute Software
CVEs, 365 days3463 all time, 0 rejected
Quality66%median 99%
CVSS by the CNA100%share of records
CWE0%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Absolute Software |
| Role | CNA |
| Type | Vendor |
| Reports to | mitre |
| Scope | Absolute issues only. |
| Advisories | https://www.absolute.com/platform/security-information/vulnerability-archive/ |
Latest CVEs · RSS
- CVE-2026-97717 2026-10-07 · CVSS 6.0CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server
- CVE-2026-97716 2026-10-07 · CVSS 8.7CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specia
- CVE-2026-97715 2026-10-07 · CVSS 7.1CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed
- CVE-2026-97714 2026-10-07 · CVSS 8.2CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response
- CVE-2026-55402 2026-08-13 · CVSS 8.7CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send spe
- CVE-2026-55401 2026-08-13 · CVSS 6.9CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthentic
- CVE-2026-55400 2026-08-13 · CVSS 6.0CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted tra
- CVE-2026-55399 2026-07-15 · CVSS 5.1CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunne
- CVE-2026-55398 2026-07-15 · CVSS 6.9CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control
- CVE-2026-33445 2026-07-15 · CVSS 8.7CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the
- CVE-2026-33444 2026-07-15 · CVSS 6.9CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tun
- CVE-2026-33443 2026-07-15 · CVSS 7.1CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel p
- CVE-2026-40958 2026-07-15 · CVSS 2.3CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel proto
- CVE-2026-40957 2026-07-15 · CVSS 6.1o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site co
- CVE-2026-40956 2026-07-15 · CVSS 2.1CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over
- CVE-2026-40955 2026-07-15 · CVSS 2.1CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge
- CVE-2026-40954 2026-07-15 · CVSS 2.1CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge
- CVE-2026-40953 2026-07-15 · CVSS 6.7CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator per
- CVE-2026-40952 2026-07-15 · CVSS 8.5CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local acc
- CVE-2026-40951 2026-04-30 · CVSS 6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can se
- CVE-2026-40950 2026-04-30 · CVSS 7.1CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially
- CVE-2026-40949 2026-04-30 · CVSS 6.8CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can u
- CVE-2026-33452 2026-04-30 · CVSS 5.9CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can u
- CVE-2026-33451 2026-04-30 · CVSS 8.5CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client
- CVE-2026-33450 2026-04-30 · CVSS 2.3CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a