8.5
/ 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure
Access Windows client prior to 14.50. Attackers with local control of
the Windows client can send malformed data to an API and elevate their
level of privilege to system.
Access Windows client prior to 14.50. Attackers with local control of
the Windows client can send malformed data to an API and elevate their
level of privilege to system.
AI Analysis
Arbitrary read/write vulnerability allowing attackers to elevate privileges to system level
Basic Information
ID
CVE-2026-33451
Source
Absolute
Published
Apr 30, 2026 at 20:08
Affected Product
Vendor
Absolute Software
Product
Secure Access
Affected Versions
Absolute Software Secure Access 0
AI Assessment
AI Score
8.5 / 10
AI Severity
High
Vendor
Absolute Software
Product
Secure Access
Version
prior to 14.50