Search
Search Results (415459 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-108304 | 2026-10-27 | 7.8 High | ||
| Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | ||||
| CVE-2026-87086 | 2026-10-27 | 7.5 High | ||
| Tanium addressed a denial of service vulnerability in Provision. | ||||
| CVE-2026-108309 | 2026-10-27 | 5.5 Medium | ||
| Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. | ||||
| CVE-2026-116658 | 2026-10-27 | 6.5 Medium | ||
| Tanium addressed a denial of service vulnerability in Enforce. | ||||
| CVE-2026-108313 | 2026-10-27 | 6.6 Medium | ||
| Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | ||||
| CVE-2026-116649 | 2026-10-27 | 7.1 High | ||
| Tanium addressed an improper output sanitization vulnerability in Enforce. | ||||
| CVE-2026-116647 | 2026-10-27 | 7.1 High | ||
| Tanium addressed an improper output sanitization vulnerability in Comply. | ||||
| CVE-2026-116660 | 2026-10-27 | 4.3 Medium | ||
| Tanium addressed an improper access controls vulnerability in Enforce. | ||||
| CVE-2026-108326 | 2026-10-27 | 6.5 Medium | ||
| Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | ||||
| CVE-2026-108330 | 2026-10-27 | 3.6 Low | ||
| Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-116657 | 2026-10-27 | 5.3 Medium | ||
| Tanium addressed a denial of service vulnerability in Enforce. | ||||
| CVE-2026-108333 | 2026-10-27 | 2.5 Low | ||
| Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-108307 | 2026-10-27 | 7.8 High | ||
| Tanium addressed a heap-based buffer overflow vulnerability in Index. | ||||
| CVE-2026-116679 | 2026-10-27 | 5.4 Medium | ||
| Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost() evaluates host status incorrectly. An authenticated room member who establishes a WebRTC connection can send mouse and keyboard events through the legacy control channel while controls are locked or the member is otherwise unauthorized by the modern control API. This issue is fixed in version 3.1.5. | ||||
| CVE-2026-108310 | 2026-10-27 | 5.3 Medium | ||
| Tanium addressed a denial of service vulnerability in Tanium Server. | ||||
| CVE-2026-116662 | 2026-10-27 | 7.5 High | ||
| Tanium addressed a compression bomb vulnerability in Enforce. | ||||
| CVE-2026-108305 | 2026-10-27 | 7.8 High | ||
| Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | ||||
| CVE-2026-108331 | 2026-10-27 | 3.3 Low | ||
| Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | ||||
| CVE-2026-103576 | 1 Microsoft | 9 Windows 10 1607, Windows 10 1809, Windows Server 2016 and 6 more | 2026-10-27 | 6.5 Medium |
| Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-87085 | 2026-10-27 | 6.5 Medium | ||
| Tanium addressed a SQL injection vulnerability in Provision. | ||||