This vulnerability in Absolute Software Secure Access Windows clients prior to version 14.50 involves memory corruption triggered by sending malformed data to an API. The attacker requires local access with limited privileges to exploit the issue, which leads to denial of service. The CVSS 4.0 vector indicates low attack complexity and no user interaction required, but privileges are needed. No vendor advisory or patch information is available, and the vulnerability is publicly disclosed as of April 30, 2026.

Successful exploitation results in denial of service on the affected Windows client. There is no indication of privilege escalation, code execution, or data compromise. The impact is limited to service disruption on the local client machine.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only to reduce risk. Monitor Absolute Software communications for updates on patches or workarounds.