Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-33448

Format string vulnerability in MacOS clients prior to 14.50

Description

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Absolute Software Secure Access

Default version status: unaffected

  • 0 to < 14.50affected

References