CVE-2026-108309Medium· 5.5▾ SunlitTanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
endpoint_configuration_toolset_solution >= 1.51 < 1.51.60endpoint_configuration_toolset_solution >= 1.59 < 1.59.50endpoint_configuration_toolset_solution >= 1.71 < 1.71.25performance-cx >= 2.7.648 < 2.7.648performance-cx >= 2.8.2110 < 2.8.2110performance-cx >= 2.9.1165 < 2.9.1165performance-cx >= 2.11.1312 < 2.11.1312performance-cx >= 2.13.1010 < 2.13.1010performance-cx >= 2.14.56 < 2.14.56Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108305High· 7.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108331Low· 3.3Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
CVE-2026-108310Medium· 5.3Tanium addressed a denial of service vulnerability in Tanium Server.
CVE-2026-108307High· 7.8Tanium addressed a heap-based buffer overflow vulnerability in Index.
CVE-2026-108333Low· 2.5Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
CVE-2026-116657Medium· 5.3Tanium addressed a denial of service vulnerability in Enforce.