CVE-2026-33451 — Arbitrary read/write vulnerability in Windows clients prior to 14.50

CVE-2026-33451

Arbitrary read/write vulnerability in Windows clients prior to 14.50 PUBLISHED

Description (CNA)

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.

Affected (CNA)

Vendor / product	Versions
Absolute Software / Secure Access	affected 0 before 14.50

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-33451

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.