CVE-2026-33451 HIGH

CVE-2026-33451: Arbitrary read/write vulnerability in Windows clients prior to 14.50

Vendor Absolute Software
Product Secure Access
Published April 30, 2026
Last update May 1, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.

Key dates

02Disclosure timeline

April 30, 2026 CVE published
May 1, 2026 Record updated