The vulnerability is a denial of service flaw in Tanium Enforce. The weakness is a memory allocation issue as identified by CWE-770. No additional details on the exploitation mechanism are provided in the advisory, and the description only states that Tanium has addressed the vulnerability.

The flaw affects Tanium Enforce. No specific version information is provided by the CNA, so any deployment of Tanium Enforce could potentially be impacted until an official fix is released.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no widespread exploitation at this time. The likely attack vector is network access to the Enforce service, but this is inferred because the description does not detail how the flaw is triggered.