Description
Tanium addressed a denial of service vulnerability in Tanium Client.
Published: 2026-11-03
Score: 6.5 Medium
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

A vulnerability in Tanium Client allows an attacker to cause a denial of service by triggering a flaw that consumes system resources until the client crashes or becomes unresponsive. The weakness is a classic integer overflow issue as identified by CWE-190, which can lead to memory corruption or system instability. The impact is localized to the affected Tanium Client process, potentially disrupting endpoint management and monitoring functions for the compromised machine.

Affected Systems

The vulnerability affects Tanium Client software. Specific affected versions are not listed in the data, so all deployments of Tanium Client remain potentially impacted until a patch is applied.

Risk and Exploitability

The CVSS score of 6.5 indicates moderate severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog, suggesting no known public exploits. The attack vector is not explicitly stated; based on the description, it is inferred that the flaw could be triggered through normal client operation or potentially by malicious inputs crafted to exploit the integer overflow. Remote execution is not confirmed, but any ability to send special input to the client would enable exploitation. Overall, the risk is moderate with uncertainty around exploitation frequency and vector.

Generated by OpenCVE AI on November 4, 2026 at 03:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Tanium Client security patch from Tanium’s official release channel.
  • Coordinate with system owners to deploy the update to all endpoints in a timely manner.
  • If a patch is not yet available, restrict network communication for Tanium Clients until the issue is resolved.

Generated by OpenCVE AI on November 4, 2026 at 03:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
History

Tue, 03 Nov 2026 22:30:00 +0000

Type Values Removed Values Added
Description Tanium addressed a denial of service vulnerability in Tanium Client.
Title Tanium addressed a denial of service vulnerability in Tanium Client.
Weaknesses CWE-190
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Tanium

Published:

Updated: 2026-11-03T22:14:49.836Z

Reserved: 2026-10-09T19:21:32.074Z

Link: CVE-2026-108324

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-03T23:17:24.660

Modified: 2026-11-03T23:17:24.810

Link: CVE-2026-108324

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-04T04:00:13Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound