Tanium endpoint configuration toolset solution buffer error vulnerability

Versions prior to 1.71.25, 1.59.50, and 1.51.60 of the Tanium endpoint configuration toolset, as well as versions prior to 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271, and 1.21.1673 of Tanium Threat-Response-CX contain a buffer error vulnerability stemming from an out-of-bounds read, which may lead...

Tanium endpoint configuration toolset solution encryption issue vulnerability

The Tanium endpoint configuration toolset versions prior to 1.51, 1.59, and 1.71, as well as Tanium cx-stream versions prior to 2.4.1184, 2.7.1160, 2.8.1465, and 2.9.561 contain an encryption-related vulnerability. This vulnerability stems from improper certificate validation within the Stream...

Vulnerability related to permission and access control issues in the Tanium endpoint configuration toolset solution

Versions prior to 1.51.60 of the Tanium endpoint configuration toolset, versions prior to 1.59.50 of 1.51 and versions prior to 1.71.25 of 1.59, as well as versions prior to 1.8.47, 1.11.60, 1.19.32, 1.21.83, 1.22.11, 1.23.7, and 1.24.59 of Tanium end-user-cx contain a security vulnerability. Thi...

Tanium endpoint configuration toolset solution resource management error vulnerability

The Tanium endpoint configuration toolset versions prior to 1.51, 1.59, and 1.71, as well as performance-cx versions prior to 2.7.648, 2.8.2110, 2.9.1165, 2.11.1312, 2.13.1010, and 2.14.56 contain a resource management error vulnerability. This vulnerability stems from uncontrolled resource...

Tanium endpoint configuration toolset solution post-link vulnerability

The Tanium endpoint configuration toolset contains post-link vulnerabilities in versions prior to 1.51 through 1.51.60, 1.59 through 1.59.50, and 1.71 through 1.71.25. Additionally, end-user-cx versions prior to 1.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766, and 1.24.590 also have thi...

Tanium endpoint configuration toolset solution buffer error vulnerability

The Tanium endpoint configuration toolset versions prior to 1.51 through 1.51.60, 1.59 through 1.59.50, and 1.71 through 1.71.25, as well as Tanium Index-CX versions prior to 3.9.520, 3.11.443, 3.14.917, 3.14.921, 3.15.2420, and 3.16.984 contain a buffer error vulnerability. This vulnerability...

Tanium endpoint configuration toolset solution post-link vulnerability

The EndPoint Configuration Toolset for Tanium versions 1.51 through 1.51.60, 1.59 through 1.59.50, and 1.71 through 1.71.25, as well as end-user-cx versions prior to 1.8.47, 1.11.605, 1.19.325, 1.21.835, 1.22.1199, 1.23.766, and 1.24.590 contain a post-link vulnerability. This vulnerability stems...

Tanium endpoint configuration toolset solution resource management error vulnerability

The Tanium endpoint configuration toolset versions from 1.51 up to 1.51.60, 1.59 up to 1.59.50, and 1.71 up to 1.71.25 contain a resource management error vulnerability stemming from use-after-free issues. This vulnerability affects Tanium threat-response-cx versions prior to 1.17.802, 1.18.2732,...

Tanium endpoint configuration toolset solution resource management error vulnerability

Versions prior to 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271, and 1.21.1673 of the Tanium endpoint configuration toolset contain a resource management error vulnerability stemming from an infinite loop issue, which may lead to a denial of service...

Tanium endpoint configuration toolset solution post-link vulnerability

Versions prior to 1.51.60 of the Tanium endpoint configuration toolset, versions prior to 1.59.50 of the 1.59.x series, and versions prior to 1.71.25 of the 1.71.x series contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access, potentially...

CVE-2025-15319

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools...

CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

CVE-2025-15318

CVE-2025-15318 concerns an arbitrary file deletion vulnerability in Tanium End-User Notifications Endpoint Tools. The public records indicate Tanium addressed the issue, with referenced advisories (e.g., TAN-2025-017) and CVSS metrics showing LOCAL attacker, high impact on integrity and availabil...

CVE-2025-15319

Tanium Patch Endpoint Tools contains a local privilege escalation vulnerability. Based on the CVSS 3.1 metrics, it requires local access with low privileges and no user interaction, and yields high impact on confidentiality, integrity, and availability. The description confirms the issue is addre...

CVE-2025-15319 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools...

EUVD-2024-54589

Malicious code in bioql PyPI...

CVE-2024-13954

Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

CVE-2024-13946 Binary Planting / LoadLibrary DLL's not Signed

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

CVE-2024-13954: Insecure Storage of Sensitive Information

Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

PT-2025-22533 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue is related to DLL's not being digitally signed when loaded in ASPECT's configuration toolset. This exposes the...