Tanium reported a denial‑of‑service issue in its Enforce product. The flaw permits an attacker to make the Enforce service crash or become unresponsive, interrupting normal operations. The problem is a NULL pointer dereference (CWE‑476). No direct data or code execution capabilities are provided to the attacker.

All versions of Tanium Enforce are potentially affected. No specific affected versions are listed, so any installed instance of Enforce should be verified against vendor advisories.

The CVSS score of 6.5 indicates moderate severity. The EPSS score is unavailable, so exploitation likelihood cannot be quantified. The vulnerability is not listed in the CISA KEV catalog, implying no confirmed public exploits. The description does not detail the attack vector, but it is inferred that sending malformed data to Enforce could trigger the crash, suggesting remote possibility if the service is exposed to untrusted networks.