← Back to CVE Explorer

CVE-2026-108331

Full vulnerability record from the local CVENow database.

Description

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Severity

LOW

CVSS score

3.3 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

3938794e-25f5-4123-a1ba-5cbd7f104512

Published

2026-10-27 18:17:33.780000

Last modified

2026-10-28 14:15:58.863000

View original CVE JSON

{
  "id": "CVE-2026-108331",
  "sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512",
  "published": "2026-10-27T18:17:33.780",
  "lastModified": "2026-10-28T14:15:58.863",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
    }
  ],
  "affected": [
    {
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "affectedData": [
        {
          "vendor": "Tanium",
          "product": "Endpoint Configuration Toolset Solution",
          "versions": [
            {
              "version": "1.71.0",
              "lessThan": "1.71.25",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "1.59.0",
              "lessThan": "1.59.50",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "1.51.0",
              "lessThan": "1.51.60",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Tanium",
          "product": "threat-response-cx",
          "versions": [
            {
              "version": "1.17.802",
              "lessThan": "1.17.802",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "1.18.2732",
              "lessThan": "1.18.2732",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "1.19.2213",
              "lessThan": "1.19.2213",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "1.20.2271",
              "lessThan": "1.20.2271",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "1.21.1673",
              "lessThan": "1.21.1673",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4
      }
    ]
  },
  "weaknesses": [
    {
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        },
        {
          "lang": "en",
          "value": "CWE-674"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://security.tanium.com/TAN-2026-063",
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512"
    }
  ]
}