Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-108333 (GCVE-0-2026-108333)

Vulnerability from nvd – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Summary

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-416 - Use After Free

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-068

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:35.035Z",
      "datePublic": "2026-10-27T17:26:20.572Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.473Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-068",
          "url": "https://security.tanium.com/TAN-2026-068"
        }
      ],
      "title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108333",
    "datePublished": "2026-10-27T17:33:55.473Z",
    "dateReserved": "2026-10-09T19:21:35.177Z",
    "dateUpdated": "2026-10-27T17:33:55.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108332 (GCVE-0-2026-108332)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-055

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51.0 , < 1.51.60 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.71.0 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108331 (GCVE-0-2026-108331)

Vulnerability from nvd – Published: 2026-10-27 17:32 – Updated: 2026-10-27 17:32

Title

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-674 - Uncontrolled Recursion
CWE-400 - Uncontrolled Resource Consumption

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-063

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.333Z",
      "datePublic": "2026-10-27T17:26:18.901Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:32:07.314Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-063",
          "url": "https://security.tanium.com/TAN-2026-063"
        }
      ],
      "title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108331",
    "datePublished": "2026-10-27T17:32:07.314Z",
    "dateReserved": "2026-10-09T19:21:34.494Z",
    "dateUpdated": "2026-10-27T17:32:07.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108330 (GCVE-0-2026-108330)

Vulnerability from nvd – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Severity

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-056

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.985Z",
      "datePublic": "2026-10-27T17:26:16.937Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.683Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-056",
          "url": "https://security.tanium.com/TAN-2026-056"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108330",
    "datePublished": "2026-10-27T17:35:05.683Z",
    "dateReserved": "2026-10-09T19:21:34.110Z",
    "dateUpdated": "2026-10-27T17:35:05.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108332 (GCVE-0-2026-108332)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-055

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51.0 , < 1.51.60 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.71.0 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108330 (GCVE-0-2026-108330)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Severity

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-056

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.985Z",
      "datePublic": "2026-10-27T17:26:16.937Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.683Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-056",
          "url": "https://security.tanium.com/TAN-2026-056"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108330",
    "datePublished": "2026-10-27T17:35:05.683Z",
    "dateReserved": "2026-10-09T19:21:34.110Z",
    "dateUpdated": "2026-10-27T17:35:05.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108333 (GCVE-0-2026-108333)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33

Title

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Summary

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-416 - Use After Free

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-068

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:35.035Z",
      "datePublic": "2026-10-27T17:26:20.572Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.473Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-068",
          "url": "https://security.tanium.com/TAN-2026-068"
        }
      ],
      "title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108333",
    "datePublished": "2026-10-27T17:33:55.473Z",
    "dateReserved": "2026-10-09T19:21:35.177Z",
    "dateUpdated": "2026-10-27T17:33:55.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108331 (GCVE-0-2026-108331)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:32 – Updated: 2026-10-27 17:32

Title

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-674 - Uncontrolled Recursion
CWE-400 - Uncontrolled Resource Consumption

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 68 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-063

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.71.0 , < 1.71.25 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.333Z",
      "datePublic": "2026-10-27T17:26:18.901Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:32:07.314Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-063",
          "url": "https://security.tanium.com/TAN-2026-063"
        }
      ],
      "title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108331",
    "datePublished": "2026-10-27T17:32:07.314Z",
    "dateReserved": "2026-10-09T19:21:34.494Z",
    "dateUpdated": "2026-10-27T17:32:07.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

8 vulnerabilities found for threat-response-cx by Tanium

CVE-2026-108333 (GCVE-0-2026-108333)

CVE-2026-108332 (GCVE-0-2026-108332)

CVE-2026-108331 (GCVE-0-2026-108331)

CVE-2026-108330 (GCVE-0-2026-108330)

CVE-2026-108332 (GCVE-0-2026-108332)

CVE-2026-108330 (GCVE-0-2026-108330)

CVE-2026-108333 (GCVE-0-2026-108333)

CVE-2026-108331 (GCVE-0-2026-108331)