Tanium

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• –UnscoredOct 28, 2026TaniumADV-cccs-04e71d888438Serial number: AV26-1097 Date: October 28, 2026 As of October 27, 2026, Tanium is affected by vulnerabilities in the following products: Certificate Manager Prior to 1.17.417 Prior to 1.18.368 Prior to 1.22.119 Endpoint Configuration Toolset Solution Prior to 1.51.60 Prior to 1.59.50 Prior to 1.71.25 Enforce Prior to 2.10.778 Prior to 2.9.736 Prior to 3.0.373 Provision Prior to 1.17.150 Prior to 1.23.161 Prior to 1.24.199 Threat Response Prior to 4.12.349 Prior to 4.17.327 Prior to 4.9.476 end-u
• 7.5HighOct 27, 2026Tanium EnforceCVE-2026-116662Tanium addressed a compression bomb vulnerability in Enforce.
• 4.3MediumOct 27, 2026Tanium Enforce Auth bypass / access controlCVE-2026-116660Tanium addressed an improper access controls vulnerability in Enforce.
• 4.3MediumOct 27, 2026Tanium Enforce Denial of serviceCVE-2026-116659Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
• 6.5MediumOct 27, 2026Tanium Enforce Memory corruptionCVE-2026-116658Tanium addressed a denial of service vulnerability in Enforce.
• 5.3MediumOct 27, 2026Tanium Enforce Denial of serviceCVE-2026-116657Tanium addressed a denial of service vulnerability in Enforce.
• 7.5HighOct 27, 2026Tanium Enforce Denial of serviceCVE-2026-116656Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
• 7.1HighOct 27, 2026Tanium EnforceCVE-2026-116649Tanium addressed an improper output sanitization vulnerability in Enforce.
• 7.1HighOct 27, 2026Tanium ComplyCVE-2026-116647Tanium addressed an improper output sanitization vulnerability in Comply.
• 2.5LowOct 27, 2026Tanium Endpoint Configuration Toolset Solution Memory corruptionCVE-2026-108333Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
• 6.3MediumOct 27, 2026Tanium Endpoint Configuration Toolset Solution Path traversal / file handlingCVE-2026-108332Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
• 3.3LowOct 27, 2026Tanium Endpoint Configuration Toolset Solution Denial of serviceCVE-2026-108331Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
• 3.6LowOct 27, 2026Tanium Endpoint Configuration Toolset Solution Memory corruptionCVE-2026-108330Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
• 8.8HighOct 27, 2026Tanium Threat Response Code / command injectionCVE-2026-108329Tanium addressed an unauthorized code execution vulnerability in Threat Response.
• 4.2MediumOct 27, 2026Tanium Threat Response Information disclosureCVE-2026-108328Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
• 6.5MediumOct 27, 2026Tanium Endpoint Configuration Toolset Solution Crypto / certificateCVE-2026-108326Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
• 6.6MediumOct 27, 2026Tanium Reputation Information disclosureCVE-2026-108325Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
• 4.3MediumOct 27, 2026Tanium Server Information disclosureCVE-2026-108316Tanium addressed an information disclosure vulnerability in Tanium Server.
• 6.6MediumOct 27, 2026Tanium ServerCVE-2026-108313Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
• 2.7LowOct 27, 2026Tanium ServerCVE-2026-108311Tanium addressed an insufficient logging vulnerability in Tanium Server.
• 5.3MediumOct 27, 2026Tanium Server Denial of serviceCVE-2026-108310Tanium addressed a denial of service vulnerability in Tanium Server.
• 5.5MediumOct 27, 2026Tanium Endpoint Configuration Toolset Solution Denial of serviceCVE-2026-108309Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
• 6.5MediumOct 27, 2026Tanium Patch SQL injectionCVE-2026-108308Tanium addressed a SQL injection vulnerability in Patch.
• 7.8HighOct 27, 2026Tanium Endpoint Configuration Toolset Solution Memory corruptionCVE-2026-108307Tanium addressed a heap-based buffer overflow vulnerability in Index.
• 7.8HighOct 27, 2026Tanium Endpoint Configuration Toolset Solution Path traversal / file handlingCVE-2026-108306Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
• 7.8HighOct 27, 2026Tanium Endpoint Configuration Toolset Solution Path traversal / file handlingCVE-2026-108305Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
• 7.8HighOct 27, 2026Tanium Endpoint Configuration Toolset Solution Path traversal / file handlingCVE-2026-108304Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
• 8.8HighOct 27, 2026Tanium Certificate Manager Code / command injectionCVE-2026-108303Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
• 4.3MediumOct 27, 2026Tanium Comply Auth bypass / access controlCVE-2026-108302Tanium addressed an improper access controls vulnerability in Comply.
• 6.0MediumOct 27, 2026Tanium Comply Auth bypass / access controlCVE-2026-108301Tanium addressed an improper access controls vulnerability in Comply.

See every Tanium entry on the dashboard.

Top products

• Endpoint Configuration Toolset Solution10 CVEs in the last year
• Enforce7 CVEs in the last year
• Tanium Server4 CVEs in the last year
• Comply3 CVEs in the last year
• Threat Response2 CVEs in the last year
• Reputation1 CVE in the last year
• Patch1 CVE in the last year
• Certificate Manager1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• CCCS (Canada) · Oct 28, 2026Tanium security advisory (AV26-1097)ADV-cccs-04e71d888438