Refine your search

4 vulnerabilities found for threat-response-cx by Tanium

CVE-2026-108332 (GCVE-0-2026-108332)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
6.3 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE
  • CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51.0   < 1.51.60
Version: 1.59.0   < 1.59.50
Version: 1.71.0   < 1.71.25
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108330 (GCVE-0-2026-108330)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
3.6 (Low) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
CWE
Summary
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.71.0   < 1.71.25
Version: 1.59.0   < 1.59.50
Version: 1.51.0   < 1.51.60
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.985Z",
      "datePublic": "2026-10-27T17:26:16.937Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.683Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-056",
          "url": "https://security.tanium.com/TAN-2026-056"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108330",
    "datePublished": "2026-10-27T17:35:05.683Z",
    "dateReserved": "2026-10-09T19:21:34.110Z",
    "dateUpdated": "2026-10-27T17:35:05.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108333 (GCVE-0-2026-108333)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
2.5 (Low) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE
Summary
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.51   < 1.51.60
Version: 1.59   < 1.59.50
Version: 1.71   < 1.71.25
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:35.035Z",
      "datePublic": "2026-10-27T17:26:20.572Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:33:55.473Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-068",
          "url": "https://security.tanium.com/TAN-2026-068"
        }
      ],
      "title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108333",
    "datePublished": "2026-10-27T17:33:55.473Z",
    "dateReserved": "2026-10-09T19:21:35.177Z",
    "dateUpdated": "2026-10-27T17:33:55.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108331 (GCVE-0-2026-108331)
Vulnerability from cvelistv5
Published
2026-10-27 17:32
Modified
2026-10-27 17:32
Severity ?
3.3 (Low) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE
  • CWE-674 - Uncontrolled Recursion
  • CWE-400 - Uncontrolled Resource Consumption
Summary
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
References
Impacted products
Vendor Product Version
Tanium Endpoint Configuration Toolset Solution Version: 1.71.0   < 1.71.25
Version: 1.59.0   < 1.59.50
Version: 1.51.0   < 1.51.60
 Create a notification for this product.
   Tanium threat-response-cx Version: 1.17.802   ≤
Version: 1.18.2732   ≤
Version: 1.19.2213   ≤
Version: 1.20.2271   ≤
Version: 1.21.1673   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.333Z",
      "datePublic": "2026-10-27T17:26:18.901Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:32:07.314Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-063",
          "url": "https://security.tanium.com/TAN-2026-063"
        }
      ],
      "title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108331",
    "datePublished": "2026-10-27T17:32:07.314Z",
    "dateReserved": "2026-10-09T19:21:34.494Z",
    "dateUpdated": "2026-10-27T17:32:07.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}