CVE-2026-33448 — Format string vulnerability in MacOS clients prior to 14.50

CVE-2026-33448

Format string vulnerability in MacOS clients prior to 14.50 PUBLISHED

Description (CNA)

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets.

Affected (CNA)

Vendor / product	Versions
Absolute Software / Secure Access	affected 0 before 14.50

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-33448

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.