CVE-2026-33451

Arbitrary read/write vulnerability in Windows clients prior to 14.50

High · published April 30, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure

Access Windows client prior to 14.50. Attackers with local control of

the Windows client can send malformed data to an API and elevate their

level of privilege to system.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00153 · 4.1th percentile
Published
2026-04-30T20:08Z
EPSS history
Timeline
  • 30 APR 20:08Z
    Arbitrary read/write vulnerability in Windows clients prior to 14.50
    cvelistv5