Dashboard / CVE-2026-33452

CVE-2026-33452

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 47/100
Published: 2026-04-30 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: None
VI: Low
VA: High

Description

CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue screen’ the system.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
absolute secure_access < 14.50

References & Advisories (1)

Bug Bounty Relevance

47 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.10%
Raw Score 0.000970
Percentile 0.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00097
2026-10-28
0.00097

Intelligence Sources

nvd ref →

External Links