{"items":[{"id":"CVE-2026-116768","published":"2026-11-02T20:27:51.649Z","updated":"2026-11-02T21:21:35.467Z","title":"Missing length validation in Absolute Secure Access","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-116767","published":"2026-11-02T20:23:10.115Z","updated":"2026-11-06T17:55:37.827Z","title":"Improper input handling in Secure Access servers","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-116766","published":"2026-11-02T20:16:26.614Z","updated":"2026-11-06T17:54:36.342Z","title":"Improper input handling in Secure Access server","severity":"HIGH","score":8.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-40951","published":"2026-04-30T20:22:16.201Z","updated":"2026-05-01T14:29:48.263Z","title":"Memory corruption in Secure Access Windows clients prior to 14.50","severity":"MEDIUM","score":6.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-40950","published":"2026-04-30T20:19:11.609Z","updated":"2026-05-01T14:31:19.868Z","title":"Buffer overflow in the Secure Access server prior to 14.50","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-40949","published":"2026-04-30T20:16:19.912Z","updated":"2026-05-01T14:32:04.114Z","title":"Buffer overflow in Windows clients prior to 14.50","severity":"MEDIUM","score":6.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-33452","published":"2026-04-30T20:12:16.166Z","updated":"2026-05-01T14:30:27.273Z","title":"Buffer overflow in Windows clients prior to 14.50","severity":"MEDIUM","score":5.9,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-33451","published":"2026-04-30T20:08:03.213Z","updated":"2026-05-01T14:36:19.832Z","title":"Arbitrary read/write vulnerability in Windows clients prior to 14.50","severity":"HIGH","score":8.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-33450","published":"2026-04-30T20:04:14.383Z","updated":"2026-05-01T14:35:43.451Z","title":"Out of bounds read in Secure Access MacOS clients prior to 14.50","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2026-33449","published":"2026-04-30T19:52:01.980Z","updated":"2026-05-01T14:33:13.244Z","title":"Message handler buffer overflow in clients prior to 14.50","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-33448","published":"2026-04-30T19:47:50.031Z","updated":"2026-05-01T14:35:03.996Z","title":"Format string vulnerability in MacOS clients prior to 14.50","severity":"MEDIUM","score":4.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2026-33447","published":"2026-04-30T19:43:27.437Z","updated":"2026-05-01T14:32:40.680Z","title":"CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can…","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-33446","published":"2026-04-30T19:36:37.319Z","updated":"2026-04-30T20:11:21.104Z","title":"Buffer overflow in client authentication prior to version 14.50","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2024-40875","published":"2024-12-20T20:17:27.132Z","updated":"2024-12-24T15:57:03.223Z","title":"Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52","severity":"MEDIUM","score":5.9,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2024-37352","published":"2024-06-20T17:28:47.745Z","updated":"2024-08-02T03:50:56.158Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37351","published":"2024-06-20T17:25:09.306Z","updated":"2024-08-02T03:50:56.092Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37350","published":"2024-06-20T17:18:33.952Z","updated":"2024-08-02T03:50:56.219Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":6.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2024-37349","published":"2024-06-20T17:11:52.447Z","updated":"2024-08-02T03:50:55.914Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37348","published":"2024-06-20T17:05:04.866Z","updated":"2024-08-02T03:50:56.211Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37347","published":"2024-06-20T16:56:50.468Z","updated":"2024-08-02T03:50:55.946Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37346","published":"2024-06-20T16:51:37.265Z","updated":"2024-08-02T03:50:55.993Z","title":"Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06","severity":"MEDIUM","score":4.9,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2024-37345","published":"2024-06-20T16:45:51.929Z","updated":"2024-08-02T03:50:56.264Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":5.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2024-37344","published":"2024-06-20T16:38:26.256Z","updated":"2024-08-02T03:50:56.114Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37343","published":"2024-06-20T16:30:21.053Z","updated":"2024-08-02T03:50:55.892Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.0022,"kevAdded":null}]}