CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Tanium addressed a compression bomb vulnerability in Enforce. The flaw may lead to excessive resource consumption when processing crafted compressed data.
Tanium addressed an improper access controls vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. The flaw may allow resource exhaustion through crafted requests or data.
Tanium addressed an improper output sanitization vulnerability in Enforce. Inadequate output sanitization may allow content injection or unsafe rendering of data.
Tanium addressed an improper output sanitization vulnerability in Comply. Inadequate output sanitization may allow content injection or unsafe rendering of data.
Candidate CVE-2026-111054 was rejected as a duplicate of CVE-2026-112374; this number should not be used and CVE-2026-112374 should be referenced instead.
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. The flaw involves improper memory management within this component.
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. The flaw may allow manipulation of file access paths.
Tanium addressed an infinite loop vulnerability in the Threat Response Client Extension.
Tanium addressed an information disclosure vulnerability in the Threat Response Client Extension.
Tanium addressed an unauthorized code execution vulnerability in Threat Response. The flaw may allow code to be executed without appropriate permissions.
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. Sensitive data may be written to logs in clear text.
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. Incorrect certificate verification may allow impersonation of a trusted server.
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. Sensitive data may be written to logs.
Tanium addressed an information disclosure vulnerability in Tanium Server. Unauthorized access to data may occur.
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. This may result in users being granted incorrect privileges.
Tanium addressed an insufficient logging vulnerability in Tanium Server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS