Skip to content
OpenAdvisories
Medium WID-SEC-2026-0466 7 CVEs

Tanium Endpoint Management: Mehrere Schwachstellen

Published Feb 19, 2026 · Updated Feb 19, 2026 · de-DE

Vendor: Tanium Product: Endpoint Management Platform: Windows

Summary

Ein entfernter authentisierter, lokaler Angreifer kann mehrere Schwachstellen in Tanium Endpoint Management ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder Daten zu manipulieren.

Product

Tanium Endpoint Management bietet Echtzeit-Sichtbarkeit und Kontrolle über alle Endpunkte in einer IT-Umgebung.

Vulnerabilities 7

  • High 8.8
    CVE-2025-15467 Public exploit EPSS 75%

    Stack buffer overflow in CMS (Auth)EnvelopedData parsing

    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.5
    CVE-2026-1292

    Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.

    Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.

    Tanium Trends
  • Medium 6.5
    CVE-2026-1344

    Insecure file permissions in Enforce Recovery Key Portal

    Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal.

    Tanium Enforce Recovery Key Portal
  • Medium 6.5
    CVE-2026-2350

    Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

    Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

    Tanium Interact TDS
  • Medium 6.3
    CVE-2026-2435

    ASSET-7706

    Tanium addressed a SQL injection vulnerability in Asset.

    Tanium Asset
  • Medium 5.3
    CVE-2026-2605

    Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

    Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

    Tanium TanOS
  • Medium 4.7
    CVE-2026-2408

    Use-after-free in Cloud Workloads

    Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.

    Tanium Cloud Workloads

Revision history

  1. #1

    Initiale Fassung

References