What’s Vulnerable › Vulnerabilities

CVE-2026-108333: Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

• Severity: low (CVSS 2.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-27 · updated 2026-10-28
• Weakness: CWE-416

Description

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Affected products

• Tanium Endpoint Configuration Toolset Solution: from 1.51 before 1.51.60; from 1.59 before 1.59.50; from 1.71 before 1.71.25 — fixed in 1.51.60, 1.59.50, 1.71.25
• Tanium threat-response-cx: from 1.17.802 before 1.17.802; from 1.18.2732 before 1.18.2732; from 1.19.2213 before 1.19.2213; from 1.20.2271 before 1.20.2271; from 1.21.1673 before 1.21.1673 — fixed in 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271, 1.21.1673

How to fix

Upgrade to a fixed version: Tanium Endpoint Configuration Toolset Solution 1.51.60, 1.59.50, 1.71.25; Tanium threat-response-cx 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271. Check the vendor advisory for mitigations.

References

• https://security.tanium.com/TAN-2026-068

Get alerted when CVE-2026-108333 or the next vulnerability affects your stack