Refine your search

10 vulnerabilities found for Endpoint Configuration Toolset Solution by Tanium

CVE-2026-108306 (GCVE-0-2026-108306)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium end-user-cx Version: 1.8.47   ≤
Version: 1.11.605   ≤
Version: 1.19.325   ≤
Version: 1.21.835   ≤
Version: 1.22.1199   ≤
Version: 1.23.766   ≤
Version: 1.24.590   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.468Z",
      "datePublic": "2026-10-27T17:26:19.759Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.154Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-065",
          "url": "https://security.tanium.com/TAN-2026-065"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108306",
    "datePublished": "2026-10-27T17:35:42.154Z",
    "dateReserved": "2026-10-09T19:21:25.635Z",
    "dateUpdated": "2026-10-27T17:35:42.154Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108332 (GCVE-0-2026-108332)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
6.3 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51.0   < 1.51.60
Version: 1.59.0   < 1.59.50
Version: 1.71.0   < 1.71.25
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108304 (GCVE-0-2026-108304)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
  • CWE-282 - Improper Ownership Management
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium end-user-cx Version: 1.8.47   ≤
Version: 1.11.605   ≤
Version: 1.19.325   ≤
Version: 1.21.835   ≤
Version: 1.22.1199   ≤
Version: 1.23.766   ≤
Version: 1.24.590   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:24.751Z",
      "datePublic": "2026-10-27T17:26:17.500Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-282",
              "description": "Improper Ownership Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:24.064Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-058",
          "url": "https://security.tanium.com/TAN-2026-058"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108304",
    "datePublished": "2026-10-27T17:35:24.064Z",
    "dateReserved": "2026-10-09T19:21:24.929Z",
    "dateUpdated": "2026-10-27T17:35:24.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108309 (GCVE-0-2026-108309)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-770 - Allocation of Resources Without Limits or Throttling
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium performance-cx Version: 2.7.648   ≤
Version: 2.8.2110   ≤
Version: 2.9.1165   ≤
Version: 2.11.1312   ≤
Version: 2.13.1010   ≤
Version: 2.14.56   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "performance-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.7.648",
              "status": "affected",
              "version": "2.7.648",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.2110",
              "status": "affected",
              "version": "2.8.2110",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.1165",
              "status": "affected",
              "version": "2.9.1165",
              "versionType": "semver"
            },
            {
              "lessThan": "2.11.1312",
              "status": "affected",
              "version": "2.11.1312",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.1010",
              "status": "affected",
              "version": "2.13.1010",
              "versionType": "semver"
            },
            {
              "lessThan": "2.14.56",
              "status": "affected",
              "version": "2.14.56",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:26.548Z",
      "datePublic": "2026-10-27T17:26:21.130Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:23.693Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-070",
          "url": "https://security.tanium.com/TAN-2026-070"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108309",
    "datePublished": "2026-10-27T17:35:23.693Z",
    "dateReserved": "2026-10-09T19:21:26.706Z",
    "dateUpdated": "2026-10-27T17:35:23.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108326 (GCVE-0-2026-108326)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
CWE
  • CWE-295 - Improper Certificate Validation
Summary
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium cx-stream Version: 2.4.1184   ≤
Version: 2.7.1160   ≤
Version: 2.8.1465   ≤
Version: 2.9.561   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "cx-stream",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.4.1184",
              "status": "affected",
              "version": "2.4.1184",
              "versionType": "semver"
            },
            {
              "lessThan": "2.7.1160",
              "status": "affected",
              "version": "2.7.1160",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.1465",
              "status": "affected",
              "version": "2.8.1465",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.561",
              "status": "affected",
              "version": "2.9.561",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:32.598Z",
      "datePublic": "2026-10-27T17:26:18.042Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.870Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-060",
          "url": "https://security.tanium.com/TAN-2026-060"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108326",
    "datePublished": "2026-10-27T17:35:05.870Z",
    "dateReserved": "2026-10-09T19:21:32.766Z",
    "dateUpdated": "2026-10-27T17:35:05.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108330 (GCVE-0-2026-108330)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
3.6 (Low) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
CWE
Summary
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.71.0   < 1.71.25
Version: 1.59.0   < 1.59.50
Version: 1.51.0   < 1.51.60
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.985Z",
      "datePublic": "2026-10-27T17:26:16.937Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.683Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-056",
          "url": "https://security.tanium.com/TAN-2026-056"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108330",
    "datePublished": "2026-10-27T17:35:05.683Z",
    "dateReserved": "2026-10-09T19:21:34.110Z",
    "dateUpdated": "2026-10-27T17:35:05.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108333 (GCVE-0-2026-108333)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
2.5 (Low) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE
Summary
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:35.035Z",
      "datePublic": "2026-10-27T17:26:20.572Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.473Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-068",
          "url": "https://security.tanium.com/TAN-2026-068"
        }
      ],
      "title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108333",
    "datePublished": "2026-10-27T17:33:55.473Z",
    "dateReserved": "2026-10-09T19:21:35.177Z",
    "dateUpdated": "2026-10-27T17:33:55.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108307 (GCVE-0-2026-108307)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-122 - Heap-based Buffer Overflow
Summary
Tanium addressed a heap-based buffer overflow vulnerability in Index.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium index-cx Version: 3.9.520   ≤
Version: 3.11.443   ≤
Version: 3.14.921   ≤
Version: 3.14.917   ≤
Version: 3.15.2420   ≤
Version: 3.16.984   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "index-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.9.520",
              "status": "affected",
              "version": "3.9.520",
              "versionType": "semver"
            },
            {
              "lessThan": "3.11.443",
              "status": "affected",
              "version": "3.11.443",
              "versionType": "semver"
            },
            {
              "lessThan": "3.14.921",
              "status": "affected",
              "version": "3.14.921",
              "versionType": "semver"
            },
            {
              "lessThan": "3.14.917",
              "status": "affected",
              "version": "3.14.917",
              "versionType": "semver"
            },
            {
              "lessThan": "3.15.2420",
              "status": "affected",
              "version": "3.15.2420",
              "versionType": "semver"
            },
            {
              "lessThan": "3.16.984",
              "status": "affected",
              "version": "3.16.984",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.812Z",
      "datePublic": "2026-10-27T17:26:17.206Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.273Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-057",
          "url": "https://security.tanium.com/TAN-2026-057"
        }
      ],
      "title": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108307",
    "datePublished": "2026-10-27T17:33:55.273Z",
    "dateReserved": "2026-10-09T19:21:25.936Z",
    "dateUpdated": "2026-10-27T17:33:55.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108305 (GCVE-0-2026-108305)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium end-user-cx Version: 1.8.47   ≤
Version: 1.11.605   ≤
Version: 1.19.325   ≤
Version: 1.21.835   ≤
Version: 1.22.1199   ≤
Version: 1.23.766   ≤
Version: 1.24.590   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.115Z",
      "datePublic": "2026-10-27T17:26:18.366Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:33.369Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-061",
          "url": "https://security.tanium.com/TAN-2026-061"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108305",
    "datePublished": "2026-10-27T17:33:33.369Z",
    "dateReserved": "2026-10-09T19:21:25.285Z",
    "dateUpdated": "2026-10-27T17:33:33.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108331 (GCVE-0-2026-108331)
Vulnerability from cvelistv5
Published
2026-10-27 17:32
Modified
2026-10-27 17:32
Severity ?
3.3 (Low) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE
  • CWE-674 - Uncontrolled Recursion
  • CWE-400 - Uncontrolled Resource Consumption
Summary
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.71.0   < 1.71.25
Version: 1.59.0   < 1.59.50
Version: 1.51.0   < 1.51.60
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.333Z",
      "datePublic": "2026-10-27T17:26:18.901Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:32:07.314Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-063",
          "url": "https://security.tanium.com/TAN-2026-063"
        }
      ],
      "title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108331",
    "datePublished": "2026-10-27T17:32:07.314Z",
    "dateReserved": "2026-10-09T19:21:34.494Z",
    "dateUpdated": "2026-10-27T17:32:07.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}