Threat Response Cx
Monthly
Improper link resolution in the Tanium Threat Response Client Extension (threat-response-cx and the Endpoint Configuration Toolset Solution) allows an authenticated local attacker with low privileges to follow a manipulated link and read or write files outside the intended location, producing high confidentiality and integrity impact with no availability effect. Affected builds include threat-response-cx releases prior to 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271 and 1.21.1673, and Endpoint Configuration Toolset Solution releases prior to 1.51.60, 1.59.50 and 1.71.25. Exploitation is local-only and additionally depends on an unspecified high-complexity condition, so realistic abuse is limited to attackers who already hold a foothold on the endpoint; no public exploit code has been identified at time of analysis.
Local information disclosure in Tanium Threat Response Client Extension and Endpoint Configuration Toolset Solution is reachable only by a low-privileged local user and depends on a high-complexity condition outside the attacker's control, so impact is limited to low confidentiality exposure and minor availability loss. No public exploit code was identified at time of analysis, and Tanium has published fixed builds under advisory TAN-2026-056.
A use-after-free memory-corruption flaw in the Tanium Threat Response Client Extension requires local access to a host plus pre-existing low-level privileges, and its worst outcome is partial availability loss of the client extension - no confidentiality or integrity impact. Tanium has released fixed builds across the Endpoint Configuration Toolset Solution (1.51, 1.59, 1.71 branches) and multiple threat-response-cx branches per advisory TAN-2026-068. This is a low-priority issue: no public exploit code, PoC reference, or CISA KEV entry is present in the available data, and the priority label is monitor.
Infinite-loop denial of service in Tanium Threat Response client extension and Endpoint Configuration Toolset Solution allows a local user with low privileges to hang the affected endpoint component, reducing availability only. Affected builds are Threat Response CX before 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271, and 1.21.1673, and Endpoint Configuration Toolset Solution before 1.51.60, 1.59.50, and 1.71.25. The vendor has released fixes, no public exploit identified at time of analysis, no CISA KEV entry, and the issue is rated monitor priority.
Improper link resolution in the Tanium Threat Response Client Extension (threat-response-cx and the Endpoint Configuration Toolset Solution) allows an authenticated local attacker with low privileges to follow a manipulated link and read or write files outside the intended location, producing high confidentiality and integrity impact with no availability effect. Affected builds include threat-response-cx releases prior to 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271 and 1.21.1673, and Endpoint Configuration Toolset Solution releases prior to 1.51.60, 1.59.50 and 1.71.25. Exploitation is local-only and additionally depends on an unspecified high-complexity condition, so realistic abuse is limited to attackers who already hold a foothold on the endpoint; no public exploit code has been identified at time of analysis.
Local information disclosure in Tanium Threat Response Client Extension and Endpoint Configuration Toolset Solution is reachable only by a low-privileged local user and depends on a high-complexity condition outside the attacker's control, so impact is limited to low confidentiality exposure and minor availability loss. No public exploit code was identified at time of analysis, and Tanium has published fixed builds under advisory TAN-2026-056.
A use-after-free memory-corruption flaw in the Tanium Threat Response Client Extension requires local access to a host plus pre-existing low-level privileges, and its worst outcome is partial availability loss of the client extension - no confidentiality or integrity impact. Tanium has released fixed builds across the Endpoint Configuration Toolset Solution (1.51, 1.59, 1.71 branches) and multiple threat-response-cx branches per advisory TAN-2026-068. This is a low-priority issue: no public exploit code, PoC reference, or CISA KEV entry is present in the available data, and the priority label is monitor.
Infinite-loop denial of service in Tanium Threat Response client extension and Endpoint Configuration Toolset Solution allows a local user with low privileges to hang the affected endpoint component, reducing availability only. Affected builds are Threat Response CX before 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271, and 1.21.1673, and Endpoint Configuration Toolset Solution before 1.51.60, 1.59.50, and 1.71.25. The vendor has released fixes, no public exploit identified at time of analysis, no CISA KEV entry, and the issue is rated monitor priority.