CVE-2026-33448 — Format string vulnerability in MacOS clients prior to 14.50
CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can forc…
Published: 2026-04-30 · CVSS: 4.8 · CVSS 4.0
CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7