Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108333 | low | 2.5 | No | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108332 | medium | 6.3 | No | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108331 | low | 3.3 | No | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108330 | low | 3.6 | No | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108329 | high | 8.8 | No | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | 2026-11-04 |
| CVE-2026-108328 | medium | 4.2 | No | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | 2026-11-04 |
| CVE-2026-108326 | medium | 6.5 | No | Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | 2026-11-04 |
| CVE-2026-108325 | medium | 6.6 | No | Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | 2026-11-04 |
| CVE-2026-108316 | medium | 4.3 | No | Tanium addressed an information disclosure vulnerability in Tanium Server. | 2026-11-04 |
| CVE-2026-108310 | medium | 5.3 | No | Tanium addressed a denial of service vulnerability in Tanium Server. | 2026-11-04 |
| CVE-2026-108307 | high | 7.8 | No | Tanium addressed a heap-based buffer overflow vulnerability in Index. | 2026-11-04 |
| CVE-2026-108306 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-11-04 |
| CVE-2026-108305 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-11-04 |
| CVE-2026-108303 | high | 8.8 | No | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | 2026-11-04 |
| CVE-2026-108302 | medium | 4.3 | No | Tanium addressed an improper access controls vulnerability in Comply. | 2026-11-04 |
| CVE-2026-108301 | medium | 6.0 | No | Tanium addressed an improper access controls vulnerability in Comply. | 2026-11-04 |
| CVE-2026-108142 | not reported | — | No | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. | 2026-11-04 |
| CVE-2026-108140 | not reported | — | No | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w... | 2026-11-04 |
| CVE-2026-105991 | low | 3.5 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing C... | 2026-11-04 |
| CVE-2026-105702 | medium | 4.3 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure of... | 2026-11-04 |