Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-108333 (GCVE-0-2026-108333)

Vulnerability from nvd – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Summary

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-416 - Use After Free

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-068

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:35.035Z",
      "datePublic": "2026-10-27T17:26:20.572Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.473Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-068",
          "url": "https://security.tanium.com/TAN-2026-068"
        }
      ],
      "title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108333",
    "datePublished": "2026-10-27T17:33:55.473Z",
    "dateReserved": "2026-10-09T19:21:35.177Z",
    "dateUpdated": "2026-10-27T17:33:55.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108332 (GCVE-0-2026-108332)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-055

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51.0 , < 1.51.60 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.71.0 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108331 (GCVE-0-2026-108331)

Vulnerability from nvd – Published: 2026-10-27 17:32 – Updated: 2026-10-27 17:32

Title

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-674 - Uncontrolled Recursion
CWE-400 - Uncontrolled Resource Consumption

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-063

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.333Z",
      "datePublic": "2026-10-27T17:26:18.901Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:32:07.314Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-063",
          "url": "https://security.tanium.com/TAN-2026-063"
        }
      ],
      "title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108331",
    "datePublished": "2026-10-27T17:32:07.314Z",
    "dateReserved": "2026-10-09T19:21:34.494Z",
    "dateUpdated": "2026-10-27T17:32:07.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108330 (GCVE-0-2026-108330)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Severity

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-056

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.985Z",
      "datePublic": "2026-10-27T17:26:16.937Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.683Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-056",
          "url": "https://security.tanium.com/TAN-2026-056"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108330",
    "datePublished": "2026-10-27T17:35:05.683Z",
    "dateReserved": "2026-10-09T19:21:34.110Z",
    "dateUpdated": "2026-10-27T17:35:05.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108326 (GCVE-0-2026-108326)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Summary

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

CWE

CWE-295 - Improper Certificate Validation

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-060

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	cx-stream	Affected: 2.4.1184 , < 2.4.1184 (semver) Affected: 2.7.1160 , < 2.7.1160 (semver) Affected: 2.8.1465 , < 2.8.1465 (semver) Affected: 2.9.561 , < 2.9.561 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "cx-stream",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.4.1184",
              "status": "affected",
              "version": "2.4.1184",
              "versionType": "semver"
            },
            {
              "lessThan": "2.7.1160",
              "status": "affected",
              "version": "2.7.1160",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.1465",
              "status": "affected",
              "version": "2.8.1465",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.561",
              "status": "affected",
              "version": "2.9.561",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:32.598Z",
      "datePublic": "2026-10-27T17:26:18.042Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.870Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-060",
          "url": "https://security.tanium.com/TAN-2026-060"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108326",
    "datePublished": "2026-10-27T17:35:05.870Z",
    "dateReserved": "2026-10-09T19:21:32.766Z",
    "dateUpdated": "2026-10-27T17:35:05.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108309 (GCVE-0-2026-108309)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Summary

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-070

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	performance-cx	Affected: 2.7.648 , < 2.7.648 (semver) Affected: 2.8.2110 , < 2.8.2110 (semver) Affected: 2.9.1165 , < 2.9.1165 (semver) Affected: 2.11.1312 , < 2.11.1312 (semver) Affected: 2.13.1010 , < 2.13.1010 (semver) Affected: 2.14.56 , < 2.14.56 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "performance-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.7.648",
              "status": "affected",
              "version": "2.7.648",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.2110",
              "status": "affected",
              "version": "2.8.2110",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.1165",
              "status": "affected",
              "version": "2.9.1165",
              "versionType": "semver"
            },
            {
              "lessThan": "2.11.1312",
              "status": "affected",
              "version": "2.11.1312",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.1010",
              "status": "affected",
              "version": "2.13.1010",
              "versionType": "semver"
            },
            {
              "lessThan": "2.14.56",
              "status": "affected",
              "version": "2.14.56",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:26.548Z",
      "datePublic": "2026-10-27T17:26:21.130Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:23.693Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-070",
          "url": "https://security.tanium.com/TAN-2026-070"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108309",
    "datePublished": "2026-10-27T17:35:23.693Z",
    "dateReserved": "2026-10-09T19:21:26.706Z",
    "dateUpdated": "2026-10-27T17:35:23.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108307 (GCVE-0-2026-108307)

Vulnerability from nvd – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Summary

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-057

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	index-cx	Affected: 3.9.520 , < 3.9.520 (semver) Affected: 3.11.443 , < 3.11.443 (semver) Affected: 3.14.921 , < 3.14.921 (semver) Affected: 3.14.917 , < 3.14.917 (semver) Affected: 3.15.2420 , < 3.15.2420 (semver) Affected: 3.16.984 , < 3.16.984 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "index-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.9.520",
              "status": "affected",
              "version": "3.9.520",
              "versionType": "semver"
            },
            {
              "lessThan": "3.11.443",
              "status": "affected",
              "version": "3.11.443",
              "versionType": "semver"
            },
            {
              "lessThan": "3.14.921",
              "status": "affected",
              "version": "3.14.921",
              "versionType": "semver"
            },
            {
              "lessThan": "3.14.917",
              "status": "affected",
              "version": "3.14.917",
              "versionType": "semver"
            },
            {
              "lessThan": "3.15.2420",
              "status": "affected",
              "version": "3.15.2420",
              "versionType": "semver"
            },
            {
              "lessThan": "3.16.984",
              "status": "affected",
              "version": "3.16.984",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.812Z",
      "datePublic": "2026-10-27T17:26:17.206Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.273Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-057",
          "url": "https://security.tanium.com/TAN-2026-057"
        }
      ],
      "title": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108307",
    "datePublished": "2026-10-27T17:33:55.273Z",
    "dateReserved": "2026-10-09T19:21:25.936Z",
    "dateUpdated": "2026-10-27T17:33:55.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108306 (GCVE-0-2026-108306)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-065

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.468Z",
      "datePublic": "2026-10-27T17:26:19.759Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.154Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-065",
          "url": "https://security.tanium.com/TAN-2026-065"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108306",
    "datePublished": "2026-10-27T17:35:42.154Z",
    "dateReserved": "2026-10-09T19:21:25.635Z",
    "dateUpdated": "2026-10-27T17:35:42.154Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108305 (GCVE-0-2026-108305)

Vulnerability from nvd – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-061

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.115Z",
      "datePublic": "2026-10-27T17:26:18.366Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:33.369Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-061",
          "url": "https://security.tanium.com/TAN-2026-061"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108305",
    "datePublished": "2026-10-27T17:33:33.369Z",
    "dateReserved": "2026-10-09T19:21:25.285Z",
    "dateUpdated": "2026-10-27T17:33:33.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108304 (GCVE-0-2026-108304)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
CWE-282 - Improper Ownership Management

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-058

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:24.751Z",
      "datePublic": "2026-10-27T17:26:17.500Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-282",
              "description": "Improper Ownership Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:24.064Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-058",
          "url": "https://security.tanium.com/TAN-2026-058"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108304",
    "datePublished": "2026-10-27T17:35:24.064Z",
    "dateReserved": "2026-10-09T19:21:24.929Z",
    "dateUpdated": "2026-10-27T17:35:24.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108306 (GCVE-0-2026-108306)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-065

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.468Z",
      "datePublic": "2026-10-27T17:26:19.759Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.154Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-065",
          "url": "https://security.tanium.com/TAN-2026-065"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108306",
    "datePublished": "2026-10-27T17:35:42.154Z",
    "dateReserved": "2026-10-09T19:21:25.635Z",
    "dateUpdated": "2026-10-27T17:35:42.154Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108332 (GCVE-0-2026-108332)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-055

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51.0 , < 1.51.60 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.71.0 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108304 (GCVE-0-2026-108304)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
CWE-282 - Improper Ownership Management

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-058

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:24.751Z",
      "datePublic": "2026-10-27T17:26:17.500Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-282",
              "description": "Improper Ownership Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:24.064Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-058",
          "url": "https://security.tanium.com/TAN-2026-058"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108304",
    "datePublished": "2026-10-27T17:35:24.064Z",
    "dateReserved": "2026-10-09T19:21:24.929Z",
    "dateUpdated": "2026-10-27T17:35:24.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108309 (GCVE-0-2026-108309)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Summary

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-070

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	performance-cx	Affected: 2.7.648 , < 2.7.648 (semver) Affected: 2.8.2110 , < 2.8.2110 (semver) Affected: 2.9.1165 , < 2.9.1165 (semver) Affected: 2.11.1312 , < 2.11.1312 (semver) Affected: 2.13.1010 , < 2.13.1010 (semver) Affected: 2.14.56 , < 2.14.56 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "performance-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.7.648",
              "status": "affected",
              "version": "2.7.648",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.2110",
              "status": "affected",
              "version": "2.8.2110",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.1165",
              "status": "affected",
              "version": "2.9.1165",
              "versionType": "semver"
            },
            {
              "lessThan": "2.11.1312",
              "status": "affected",
              "version": "2.11.1312",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.1010",
              "status": "affected",
              "version": "2.13.1010",
              "versionType": "semver"
            },
            {
              "lessThan": "2.14.56",
              "status": "affected",
              "version": "2.14.56",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:26.548Z",
      "datePublic": "2026-10-27T17:26:21.130Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:23.693Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-070",
          "url": "https://security.tanium.com/TAN-2026-070"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108309",
    "datePublished": "2026-10-27T17:35:23.693Z",
    "dateReserved": "2026-10-09T19:21:26.706Z",
    "dateUpdated": "2026-10-27T17:35:23.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108326 (GCVE-0-2026-108326)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Summary

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

CWE

CWE-295 - Improper Certificate Validation

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-060

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	cx-stream	Affected: 2.4.1184 , < 2.4.1184 (semver) Affected: 2.7.1160 , < 2.7.1160 (semver) Affected: 2.8.1465 , < 2.8.1465 (semver) Affected: 2.9.561 , < 2.9.561 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "cx-stream",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.4.1184",
              "status": "affected",
              "version": "2.4.1184",
              "versionType": "semver"
            },
            {
              "lessThan": "2.7.1160",
              "status": "affected",
              "version": "2.7.1160",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.1465",
              "status": "affected",
              "version": "2.8.1465",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.561",
              "status": "affected",
              "version": "2.9.561",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:32.598Z",
      "datePublic": "2026-10-27T17:26:18.042Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.870Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-060",
          "url": "https://security.tanium.com/TAN-2026-060"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108326",
    "datePublished": "2026-10-27T17:35:05.870Z",
    "dateReserved": "2026-10-09T19:21:32.766Z",
    "dateUpdated": "2026-10-27T17:35:05.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108330 (GCVE-0-2026-108330)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Severity

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-056

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.985Z",
      "datePublic": "2026-10-27T17:26:16.937Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.683Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-056",
          "url": "https://security.tanium.com/TAN-2026-056"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108330",
    "datePublished": "2026-10-27T17:35:05.683Z",
    "dateReserved": "2026-10-09T19:21:34.110Z",
    "dateUpdated": "2026-10-27T17:35:05.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108333 (GCVE-0-2026-108333)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Summary

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-416 - Use After Free

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-068

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:35.035Z",
      "datePublic": "2026-10-27T17:26:20.572Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.473Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-068",
          "url": "https://security.tanium.com/TAN-2026-068"
        }
      ],
      "title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108333",
    "datePublished": "2026-10-27T17:33:55.473Z",
    "dateReserved": "2026-10-09T19:21:35.177Z",
    "dateUpdated": "2026-10-27T17:33:55.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108307 (GCVE-0-2026-108307)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Summary

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-057

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	index-cx	Affected: 3.9.520 , < 3.9.520 (semver) Affected: 3.11.443 , < 3.11.443 (semver) Affected: 3.14.921 , < 3.14.921 (semver) Affected: 3.14.917 , < 3.14.917 (semver) Affected: 3.15.2420 , < 3.15.2420 (semver) Affected: 3.16.984 , < 3.16.984 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "index-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.9.520",
              "status": "affected",
              "version": "3.9.520",
              "versionType": "semver"
            },
            {
              "lessThan": "3.11.443",
              "status": "affected",
              "version": "3.11.443",
              "versionType": "semver"
            },
            {
              "lessThan": "3.14.921",
              "status": "affected",
              "version": "3.14.921",
              "versionType": "semver"
            },
            {
              "lessThan": "3.14.917",
              "status": "affected",
              "version": "3.14.917",
              "versionType": "semver"
            },
            {
              "lessThan": "3.15.2420",
              "status": "affected",
              "version": "3.15.2420",
              "versionType": "semver"
            },
            {
              "lessThan": "3.16.984",
              "status": "affected",
              "version": "3.16.984",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.812Z",
      "datePublic": "2026-10-27T17:26:17.206Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.273Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-057",
          "url": "https://security.tanium.com/TAN-2026-057"
        }
      ],
      "title": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108307",
    "datePublished": "2026-10-27T17:33:55.273Z",
    "dateReserved": "2026-10-09T19:21:25.936Z",
    "dateUpdated": "2026-10-27T17:33:55.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108305 (GCVE-0-2026-108305)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-061

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.115Z",
      "datePublic": "2026-10-27T17:26:18.366Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:33.369Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-061",
          "url": "https://security.tanium.com/TAN-2026-061"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108305",
    "datePublished": "2026-10-27T17:33:33.369Z",
    "dateReserved": "2026-10-09T19:21:25.285Z",
    "dateUpdated": "2026-10-27T17:33:33.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108331 (GCVE-0-2026-108331)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:32 – Updated: 2026-10-27 17:32

Title

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-674 - Uncontrolled Recursion
CWE-400 - Uncontrolled Resource Consumption

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-063

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.333Z",
      "datePublic": "2026-10-27T17:26:18.901Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:32:07.314Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-063",
          "url": "https://security.tanium.com/TAN-2026-063"
        }
      ],
      "title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108331",
    "datePublished": "2026-10-27T17:32:07.314Z",
    "dateReserved": "2026-10-09T19:21:34.494Z",
    "dateUpdated": "2026-10-27T17:32:07.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

20 vulnerabilities found for Endpoint Configuration Toolset Solution by Tanium

CVE-2026-108333 (GCVE-0-2026-108333)

CVE-2026-108332 (GCVE-0-2026-108332)

CVE-2026-108331 (GCVE-0-2026-108331)

CVE-2026-108330 (GCVE-0-2026-108330)

CVE-2026-108326 (GCVE-0-2026-108326)

CVE-2026-108309 (GCVE-0-2026-108309)

CVE-2026-108307 (GCVE-0-2026-108307)

CVE-2026-108306 (GCVE-0-2026-108306)

CVE-2026-108305 (GCVE-0-2026-108305)

CVE-2026-108304 (GCVE-0-2026-108304)

CVE-2026-108306 (GCVE-0-2026-108306)

CVE-2026-108332 (GCVE-0-2026-108332)

CVE-2026-108304 (GCVE-0-2026-108304)

CVE-2026-108309 (GCVE-0-2026-108309)

CVE-2026-108326 (GCVE-0-2026-108326)

CVE-2026-108330 (GCVE-0-2026-108330)

CVE-2026-108333 (GCVE-0-2026-108333)

CVE-2026-108307 (GCVE-0-2026-108307)

CVE-2026-108305 (GCVE-0-2026-108305)

CVE-2026-108331 (GCVE-0-2026-108331)