Tanium has 59 CVEs on record. Disclosure cadence is accelerating: 59 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 31. The median CVSS is 6.5 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-862 (8) and CWE-89 (6). Most affected products: Comply (19), Endpoint Configuration Toolset Solution (10), Enforce (9).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 6.5
Publish → KEV: —
Last 90 days: 59 prev 0

Weakness classes

Products

Comply 19
Endpoint Configuration Toolset Solution 10
Enforce 9
Tanium Server 6
Threat Response 6
Asset 2

Follow Tanium:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

Tanium vulnerabilities

CVEs affecting Tanium, newest first. Open any entry for full detail, references, and exploit status.

59 CVEsRSS

CVEs per month

Weakness classes

Products

Worst active — by depth score

Tanium vulnerabilities

Tanium addressed a denial of service vulnerability in Enforce.

Tanium addressed a SQL injection vulnerability in Provision.

Tanium addressed a SQL injection vulnerability in Patch.

Tanium addressed a compression bomb vulnerability in Enforce.

Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a denial of service vulnerability in Tanium Server.

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

Tanium addressed a denial of service vulnerability in Enforce.

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Tanium addressed an improper output sanitization vulnerability in Enforce.

Tanium addressed an improper output sanitization vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Enforce.

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Tanium addressed a denial of service vulnerability in Provision.

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Tanium addressed an information disclosure vulnerability in Tanium Server.

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

Tanium addressed an insufficient logging vulnerability in Tanium Server.