420954 matches found
CVE-2026-108329
Tanium addressed an unauthorized code execution vulnerability in its Threat Response component. The vulnerability is classified as a Command Injection (CWE-77), where the improper neutralization of special elements used in a command allows for unauthorized execution. The issue carries a High base...
CVE-2026-108332
Tanium addressed an improper link resolution before file access vulnerability (CWE-59) within the Threat Response Client Extension . The vulnerability allows for potential high impact on confidentiality and integrity when an attacker can influence link resolution. Exploitation details are not pro...
CVE-2026-108304
Tanium addressed a local privilege escalation vulnerability within the End-User Notifications component. The issue is associated with CWE-59 (Improper Link Resolution Before File Access) and CWE-282 (Improper Ownership Management). Impact includes high levels of confidentiality, integrity, and av...
CVE-2026-108301
Tanium addressed an improper access controls vulnerability in Comply , categorized under CWE-862 (Missing Authorization) . The vulnerability allows for unauthorized access, though specific technical root causes or affected components are not detailed in the provided documents. The CVSS 3.1 score ...
CVE-2026-116658
Tanium addressed a denial of service vulnerability in Enforce caused by a NULL Pointer Dereference (CWE-476). The vulnerability is associated with a medium severity score (6.5) and can be triggered over a network with low complexity. While specific affected versions and remediation details are no...
CVE-2026-87086
Tanium addressed a denial of service vulnerability in its Provision product. The vulnerability is associated with CWE-690 (Unchecked Return Value to NULL Pointer Dereference) and has a High base severity score of 7.5. No specific details regarding the affected component or exploit status are prov...
CVE-2026-108309
Tanium addressed an uncontrolled resource consumption vulnerability in the Performance Client Extension component. The vulnerability is associated with CWE-770 (Allocation of Resources Without Limits or Throttling), which can lead to high availability impact . The base CVSS 3.1 score is 5.5, refl...
CVE-2026-116660
Tanium addressed an improper access controls vulnerability (CWE-862) in its Enforce product. The vulnerability involves missing authorization , which could allow a network-based attacker with low privileges to impact the system. The base severity is Medium (4.3). Remediation information is provid...
CVE-2026-108313
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server . The vulnerability is associated with CWE-178 (Improper Handling of Case Sensitivity). The CVSS 3.1 score is 6.6 (Medium) , reflecting high impact on confidentiality, integrity, and availability, though it requires...
CVE-2026-116649
Tanium addressed an improper output sanitization vulnerability in the Enforce product. The vulnerability is associated with CWE-1236 (Improper Neutralization of Formula Elements in a CSV File). The issue has a CVSS 3.1 score of 7.1 (HIGH) , with a network attack vector and low complexity, requiri...
CVE-2026-116647
Tanium addressed an improper output sanitization vulnerability in the Comply product. The vulnerability is associated with CWE-1236 (Improper Neutralization of Formula Elements in a CSV File). The risk is characterized as HIGH severity (CVSS 3.1 score of 7.1) and requires user interaction . Speci...
CVE-2026-108330
Tanium addressed an information disclosure vulnerability in the Threat Response Client Extension . The flaw is associated with CWE-125 (Out-of-bounds Read) . According to the CVSS 3.1 metric, the vulnerability has a LOW severity score of 3.6, requiring LOW privileges and a LOCAL attack vector wit...
CVE-2026-108326
Tanium addressed an improper certificate validation vulnerability in the Stream Client Extension . The vulnerability is associated with CWE-295 . Based on the CVSS 3.1 metrics, the issue has a MEDIUM severity with a base score of 6.5 , potentially impacting confidentiality (High) and availability...
CVE-2026-116610
The WordPress Clean Login plugin (versions
CVE-2026-116657
Tanium addressed a denial of service vulnerability in its Enforce product. The vulnerability is associated with CWE-770 , which involves the allocation of resources without limits or throttling. According to the CVSS 3.1 metrics, the issue has a base score of 5.3 (Medium) , is exploitable over th...
CVE-2026-106013
The Jupiter X Core WordPress plugin (versions
CVE-2026-108333
Tanium addressed a use-after-free vulnerability (CWE-416) within the Threat Response Client Extension . The vulnerability has a CVSS 3.1 base score of 2.5 (Low) , with a local attack vector and high complexity. No specific details regarding the root cause, affected versions, or exploit availabili...
CVE-2026-108307
Tanium addressed a heap-based buffer overflow vulnerability in Index (CWE-122). The vulnerability has a base severity score of 7.8 (HIGH) . Specific technical details regarding the root cause, affected versions, or specific exploitable components are not provided in the documents. Information reg...
CVE-2026-116679
The self-hosted virtual browser Neko versions 3.0.0 through 3.1.4 are vulnerable to an authorization bypass in legacy WebRTC input handling. When legacy mode and session.implicit_hosting are enabled, the LegacyIsHost() function incorrectly evaluates host status. This allows an authenticated room ...