Product
12 published CVES affecting Tanium Endpoint Configuration Toolset Solution, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
Tanium addressed a heap-based buffer overflow vulnerability in Index.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.