Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-108303 | 8.8 high | 0.00% | no CPE yet | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | Wed 28 Oct |
| CVE-2026-108329 | 8.8 high | 0.00% | no CPE yet | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | Wed 28 Oct |
| CVE-2026-9208 | 8.8 high | 0.00% | tanium, connect | Tanium addressed an unauthorized code execution vulnerability in Connect. | Mon 26 Oct |
| CVE-2026-108304 | 7.8 high | 0.00% | no CPE yet | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | Wed 28 Oct |
| CVE-2026-108305 | 7.8 high | 0.00% | no CPE yet | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | Wed 28 Oct |
| CVE-2026-108306 | 7.8 high | 0.00% | no CPE yet | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | Wed 28 Oct |
| CVE-2026-108307 | 7.8 high | 0.00% | no CPE yet | Tanium addressed a heap-based buffer overflow vulnerability in Index. | Wed 28 Oct |
| CVE-2026-116656 | 7.5 high | 0.00% | no CPE yet | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-116662 | 7.5 high | 0.00% | no CPE yet | Tanium addressed a compression bomb vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-87086 | 7.5 high | 0.00% | no CPE yet | Tanium addressed a denial of service vulnerability in Provision. | Wed 28 Oct |
| CVE-2026-15053 | 7.5 high | 0.00% | tanium, server | Tanium addressed a denial of service vulnerability in Tanium Server. | Sun 25 Oct |
| CVE-2026-116647 | 7.1 high | 0.00% | no CPE yet | Tanium addressed an improper output sanitization vulnerability in Comply. | Wed 28 Oct |
| CVE-2026-116649 | 7.1 high | 0.00% | no CPE yet | Tanium addressed an improper output sanitization vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-108313 | 6.6 medium | 0.00% | no CPE yet | Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | Wed 28 Oct |
| CVE-2026-108325 | 6.6 medium | 0.00% | no CPE yet | Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | Wed 28 Oct |
| CVE-2026-108308 | 6.5 medium | 0.00% | no CPE yet | Tanium addressed a SQL injection vulnerability in Patch. | Wed 28 Oct |
| CVE-2026-108326 | 6.5 medium | 0.00% | no CPE yet | Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | Wed 28 Oct |
| CVE-2026-116658 | 6.5 medium | 0.00% | no CPE yet | Tanium addressed a denial of service vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-108332 | 6.3 medium | 0.00% | no CPE yet | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | Wed 28 Oct |
| CVE-2026-87085 | 6.3 medium | 0.00% | no CPE yet | Tanium addressed a SQL injection vulnerability in Provision. | Wed 28 Oct |
| CVE-2026-11391 | 6.3 medium | 0.00% | no CPE yet | Tanium addressed a SQL injection vulnerability in Patch. | 23 Oct |
| CVE-2026-108301 | 6.0 medium | 0.00% | no CPE yet | Tanium addressed an improper access controls vulnerability in Comply. | Wed 28 Oct |
| CVE-2025-13225 | 6.0 medium | 0.00% | tanium, tanos | Tanium addressed an arbitrary file deletion vulnerability in TanOS. | 18 Oct |
| CVE-2026-108309 | 5.5 medium | 0.00% | no CPE yet | Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. | Wed 28 Oct |
| CVE-2026-12139 | 5.5 medium | 0.00% | tanium, connect | Tanium addressed an information disclosure vulnerability in Connect. | Sat 24 Oct |
| CVE-2026-108310 | 5.3 medium | 0.00% | no CPE yet | Tanium addressed a denial of service vulnerability in Tanium Server. | Wed 28 Oct |
| CVE-2026-116657 | 5.3 medium | 0.00% | no CPE yet | Tanium addressed a denial of service vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-6416 | 4.9 medium | 0.00% | tanium, interact | Tanium addressed an uncontrolled resource consumption vulnerability in Interact. | Mon 26 Oct |
| CVE-2026-108302 | 4.3 medium | 0.00% | no CPE yet | Tanium addressed an improper access controls vulnerability in Comply. | Wed 28 Oct |
| CVE-2026-108316 | 4.3 medium | 0.00% | no CPE yet | Tanium addressed an information disclosure vulnerability in Tanium Server. | Wed 28 Oct |
| CVE-2026-116659 | 4.3 medium | 0.00% | no CPE yet | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-116660 | 4.3 medium | 0.00% | no CPE yet | Tanium addressed an improper access controls vulnerability in Enforce. | Wed 28 Oct |
| CVE-2026-108328 | 4.2 medium | 0.00% | no CPE yet | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | Wed 28 Oct |
| CVE-2026-108330 | 3.6 low | 0.00% | no CPE yet | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | Wed 28 Oct |
| CVE-2026-108331 | 3.3 low | 0.00% | no CPE yet | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | Wed 28 Oct |
| CVE-2026-108311 | 2.7 low | 0.00% | no CPE yet | Tanium addressed an insufficient logging vulnerability in Tanium Server. | Wed 28 Oct |
| CVE-2026-6408 | 2.7 low | 0.00% | tanium, server | Tanium addressed an information disclosure vulnerability in Tanium Server. | Mon 26 Oct |
| CVE-2026-6392 | 2.7 low | 0.00% | tanium, threat_response | Tanium addressed an information disclosure vulnerability in Threat Response. | Mon 26 Oct |
| CVE-2026-11925 | 2.7 low | 0.00% | tanium, server | Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server. | Sat 24 Oct |
| CVE-2026-108333 | 2.5 low | 0.00% | no CPE yet | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | Wed 28 Oct |
40 of 40
Download these 40 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.