CVE-2026-108333

LowCVSS 2.5

Published: 27/10/2026(UTC)Updated: 28/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. The flaw involves improper memory management within this component.

Risk Assessment

A use-after-free vulnerability may lead to application crashes or potentially execution of unintended code in the process context, affecting stability and security of the client component.

Recommendation

Update Tanium Threat Response Client Extension to the patched version.

Other vulnerabilities in Tanium Threat Response Client Extension

See all

CVE-2026-108331Low
Tanium addressed an infinite loop vulnerability in the Threat Response Client Extension.
CVE-2026-108330Low
Tanium addressed an information disclosure vulnerability in the Threat Response Client Extension.

Original NVD description (English source)

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS