A compression bomb vulnerability was identified and addressed in Tanium Enforce. This vulnerability can cause a denial of service condition by exhausting system resources when processing specially crafted compressed data.
Tanium Enforce contains an improper access controls vulnerability identified as CVE-2026-116660. This flaw allows unauthorized access due to insufficient enforcement of access restrictions. The vulnerability has a medium severity with a CVSS score of 4.3, indicating limited impact primarily on confidentiality. No public exploits or known active exploitation have been reported. No specific affected versions or patch information are provided.
Tanium Enforce contains an uncontrolled resource consumption vulnerability (CVE-2026-116659) that could allow an attacker with low privileges to cause a denial of service by exhausting resources. The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS score is 4.3 (medium severity). No affected versions or patch information is provided.
A denial of service vulnerability was identified and addressed in Tanium Enforce. The flaw could allow an attacker with low privileges to cause a denial of service condition, impacting availability. No public exploit or active exploitation is known. The vulnerability has a medium severity rating with a CVSS score of 6.5.
A vulnerability identified as CVE-2026-108332 affects the Tanium Threat Response Client Extension. It involves improper link resolution before file access, which could allow an attacker with local access and low privileges to cause high confidentiality and integrity impact. The vulnerability has a medium severity rating with a CVSS score of 6.3.
A high-severity vulnerability (CVE-2026-116649) was identified in Tanium Enforce involving improper output sanitization. This flaw could allow an attacker to cause partial confidentiality, integrity, and availability impacts. The vulnerability has a CVSS score of 7.1, indicating significant risk. No affected versions or patch information are explicitly provided in the available data.
A high-severity vulnerability (CVE-2026-116656) in Tanium Enforce allows uncontrolled resource consumption, potentially leading to denial of service. The flaw does not impact confidentiality or integrity but can cause availability disruption. No affected versions or patch information are currently provided.
A denial of service vulnerability was identified and addressed in Tanium Enforce. The flaw allows an unauthenticated attacker to cause a denial of service condition, impacting availability without affecting confidentiality or integrity.
An information disclosure vulnerability was addressed by Tanium in the Threat Response Client Extension. The vulnerability is identified as CVE-2026-108330 and has a low severity score. It involves a flaw categorized under CWE-125 (Out-of-bounds Read). No specific affected versions or patch details are provided.
Tanium Comply contains an improper output sanitization vulnerability identified as CVE-2026-116647. This flaw can lead to partial compromise of confidentiality, integrity, and availability. The vulnerability has a high severity score of 7.1 but no known exploits in the wild have been reported. No specific affected versions or patch information are provided.
Tanium Threat Response contained a vulnerability allowing unauthorized code execution. This flaw was addressed by Tanium. The vulnerability has a high severity with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability.
A use-after-free vulnerability was identified and addressed in the Tanium Threat Response Client Extension. This flaw could potentially lead to a denial of service but does not impact confidentiality or integrity. The vulnerability has a low severity rating and requires local access with high attack complexity to exploit.
An infinite loop vulnerability was identified and addressed in the Tanium Threat Response Client Extension. This flaw can cause a denial of service condition by making the affected component enter an endless processing loop.
Tanium fixed a vulnerability in its Stream Client Extension where improper certificate validation could allow an attacker to impact confidentiality. The flaw does not affect integrity but may cause limited availability issues. The vulnerability has a CVSS score of 6.5, indicating medium severity.
A SQL injection vulnerability was identified and addressed in Tanium Patch. This vulnerability could allow an attacker with low privileges to execute unauthorized SQL queries, potentially leading to high confidentiality impact without affecting integrity or availability.
Tanium Threat Response had a vulnerability allowing insertion of sensitive information into log files. This issue could lead to unauthorized disclosure of sensitive data through logs. The vulnerability has a medium severity score of 4.2 and requires high privileges and user interaction to exploit. No public exploits or known active exploitation have been reported. No affected versions or patch information are provided.
An incorrect privilege assignment vulnerability was identified and addressed in Tanium Server. The flaw could allow an attacker with high privileges to gain unauthorized access or perform unauthorized actions. The vulnerability has a CVSS score of 6.6, indicating a medium severity level.
A vulnerability in Tanium Reputation allows insertion of sensitive information into log files, potentially exposing confidential data. This issue has been assigned CVE-2026-108325 and carries a medium severity rating with a CVSS score of 6.6.
A denial of service vulnerability has been identified and addressed in Tanium Server. The vulnerability could allow an unauthenticated attacker to cause a denial of service condition, impacting availability. The issue is tracked as CVE-2026-108310 with a medium severity rating and a CVSS score of 5.3.
An information disclosure vulnerability was identified and addressed in Tanium Server. The vulnerability has a medium severity rating with a CVSS score of 4.3. It involves a flaw that could allow an attacker with low privileges to gain limited access to information without user interaction. No specific affected versions or patch details are provided.