CVE-2025-59596
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A denial-of-service vulnerability exists in Secure Access Windows client versions 12.0 to 14.10, fixed in version 14.12. If a local networking policy is active, an attacker on an adjacent network may send a crafted packet and crash the client system.
Risk Assessment
An attacker on an adjacent network could remotely crash the VPN client, disrupting user work and resource access. The risk affects organizations using Secure Access on Windows endpoints with an active local networking policy.
Recommendation
Update the Secure Access Windows client to version 14.12 or later. Until updated, consider limiting client exposure to untrusted adjacent networks.
Other vulnerabilities in Secure Access Windows client
See all- CVE-2026-40951Medium
CVE-2026-40951 is a memory corruption vulnerability in Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and trigger a denial of service.
- CVE-2026-40949Medium
CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service.
- CVE-2026-33452Medium
CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to 'blue screen' the system.
- CVE-2026-33451High
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to version 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.
Original NVD description (English source)
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS