48 matches found
CVE-2026-108333
Tanium addressed a use-after-free vulnerability (CWE-416) within the Threat Response Client Extension . The vulnerability has a CVSS 3.1 base score of 2.5 (Low) , with a local attack vector and high complexity. No specific details regarding the root cause, affected versions, or exploit availabili...
CVE-2026-108331
Tanium addressed an infinite loop vulnerability within the Threat Response Client Extension . This flaw, associated with CWE-674 (Uncontrolled Recursion) and CWE-400 (Uncontrolled Resource Consumption), could impact the availability of the service. The CVSS 3.1 score is 3.3 (Low), reflecting a lo...
EUVD-2026-111241
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension...
CVE-2026-108331 Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension...
PT-2026-127170
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...
PT-2026-127165
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension...
PT-2026-127169
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension...
PT-2026-127168
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension...
PT-2026-127159
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension...
PT-2026-127171
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension...
Exploit for CVE-2024-21546
UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-215...
EUVD-2026-67225
Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...
CVE-2026-48062
CodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the extin upload validation rule in system/Validation/StrictRules/FileRules.php checked the MIME-derived guessed extension instead of the client-provided filename extension. As a result, an uploaded file named shell.php containing...
GHSA-2GR4-PPC7-7MHX CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
Impact The extin upload validation rule checked the MIME-derived guessed extension instead of the client-provided filename extension. As a result, an uploaded file named shell.php containing GIF-like content could pass validation such as:...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408 Use-after-free in Cloud Workloads
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Technical details for CVE-2026-2408 are not publicly provided in the supplied documents. The entries only state a use-after-free vulnerability in the Cloud Workloads Enforce client extension. Monitor for updates from vendors and CVE feeds.