CVE-2026-108305: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Published Oct 27, 2026
·Updated
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Affected Software
1 affected component
Tanium End-User Notifications
Event History
Oct 27, 2026
CVE Published
via MITRE·05:33 PM
Data Sourced
via MITRE·05:33 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vulnerability has a local attack vector and requires low privileges. An attacker would need access to the affected system and an existing low-privileged account or equivalent local access.
2
What could a successful exploit allow?
The CVSS vector indicates high impact to confidentiality, integrity, and availability. Successful exploitation could therefore enable compromise of data, system changes, and service availability on the affected host.