Absolute

Absolute Software

CVEs, 365 days3463 all time, 0 rejected
Quality66%median 99%
CVSS by the CNA100%share of records
CWE0%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAbsolute Software
RoleCNA
TypeVendor
Reports tomitre
ScopeAbsolute issues only.
Advisorieshttps://www.absolute.com/platform/security-information/vulnerability-archive/
  • CVE-2026-97717 2026-10-07 · CVSS 6.0
    CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server
  • CVE-2026-97716 2026-10-07 · CVSS 8.7
    CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specia
  • CVE-2026-97715 2026-10-07 · CVSS 7.1
    CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed
  • CVE-2026-97714 2026-10-07 · CVSS 8.2
    CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response
  • CVE-2026-55402 2026-08-13 · CVSS 8.7
    CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send spe
  • CVE-2026-55401 2026-08-13 · CVSS 6.9
    CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthentic
  • CVE-2026-55400 2026-08-13 · CVSS 6.0
    CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted tra
  • CVE-2026-55399 2026-07-15 · CVSS 5.1
    CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunne
  • CVE-2026-55398 2026-07-15 · CVSS 6.9
    CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control
  • CVE-2026-33445 2026-07-15 · CVSS 8.7
    CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the
  • CVE-2026-33444 2026-07-15 · CVSS 6.9
    CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tun
  • CVE-2026-33443 2026-07-15 · CVSS 7.1
    CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel p
  • CVE-2026-40958 2026-07-15 · CVSS 2.3
    CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel proto
  • CVE-2026-40957 2026-07-15 · CVSS 6.1
    o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site co
  • CVE-2026-40956 2026-07-15 · CVSS 2.1
    CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over
  • CVE-2026-40955 2026-07-15 · CVSS 2.1
    CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge
  • CVE-2026-40954 2026-07-15 · CVSS 2.1
    CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge
  • CVE-2026-40953 2026-07-15 · CVSS 6.7
    CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator per
  • CVE-2026-40952 2026-07-15 · CVSS 8.5
    CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local acc
  • CVE-2026-40951 2026-04-30 · CVSS 6.8
    CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can se
  • CVE-2026-40950 2026-04-30 · CVSS 7.1
    CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially
  • CVE-2026-40949 2026-04-30 · CVSS 6.8
    CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can u
  • CVE-2026-33452 2026-04-30 · CVSS 5.9
    CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can u
  • CVE-2026-33451 2026-04-30 · CVSS 8.5
    CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client
  • CVE-2026-33450 2026-04-30 · CVSS 2.3
    CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a

All CVE Program partners