Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116657 | medium | 5.3 | No | Tanium addressed a denial of service vulnerability in Enforce. | 2026-10-28 |
| CVE-2026-116656 | high | 7.5 | No | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | 2026-10-28 |
| CVE-2026-116649 | high | 7.1 | No | Tanium addressed an improper output sanitization vulnerability in Enforce. | 2026-10-28 |
| CVE-2026-116647 | high | 7.1 | No | Tanium addressed an improper output sanitization vulnerability in Comply. | 2026-10-28 |
| CVE-2026-108333 | low | 2.5 | No | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | 2026-10-28 |
| CVE-2026-108332 | medium | 6.3 | No | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | 2026-10-28 |
| CVE-2026-108331 | low | 3.3 | No | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | 2026-10-28 |
| CVE-2026-108330 | low | 3.6 | No | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | 2026-10-28 |
| CVE-2026-108329 | high | 8.8 | No | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | 2026-10-28 |
| CVE-2026-108328 | medium | 4.2 | No | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | 2026-10-28 |
| CVE-2026-108326 | medium | 6.5 | No | Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | 2026-10-28 |
| CVE-2026-108325 | medium | 6.6 | No | Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | 2026-10-28 |
| CVE-2026-108316 | medium | 4.3 | No | Tanium addressed an information disclosure vulnerability in Tanium Server. | 2026-10-28 |
| CVE-2026-108313 | medium | 6.6 | No | Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | 2026-10-28 |
| CVE-2026-108311 | low | 2.7 | No | Tanium addressed an insufficient logging vulnerability in Tanium Server. | 2026-10-28 |
| CVE-2026-108310 | medium | 5.3 | No | Tanium addressed a denial of service vulnerability in Tanium Server. | 2026-10-28 |
| CVE-2026-108309 | medium | 5.5 | No | Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. | 2026-10-28 |
| CVE-2026-108308 | medium | 6.5 | No | Tanium addressed a SQL injection vulnerability in Patch. | 2026-10-28 |
| CVE-2026-108307 | high | 7.8 | No | Tanium addressed a heap-based buffer overflow vulnerability in Index. | 2026-10-28 |
| CVE-2026-108306 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-10-28 |