CVE-2025-59596: Input Validation
Published Nov 4, 2025
·Updated
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash.
Affected Software
2 affected components
Secure Access Windows client>=12.0<=14.10
Absolute Secure Access>=12.00<14.12
Event History
Nov 4, 2025
CVE Published
via MITRE·10:51 PM
Data Sourced
via MITRE·10:51 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59596?
CVE-2025-59596 is classified as a denial-of-service vulnerability.
2
How do I fix CVE-2025-59596?
To fix CVE-2025-59596, update your Secure Access Windows client to version 14.12 or later.
3
Which versions are affected by CVE-2025-59596?
CVE-2025-59596 affects Secure Access Windows client versions from 12.0 to 14.10.
4
What can attackers do with CVE-2025-59596?
Attackers on an adjacent network can send a crafted packet that may crash the client system.
5
Is there a workaround for CVE-2025-59596 if I cannot update?
Disabling active local networking policies may mitigate the risk of CVE-2025-59596 until an update can be applied.