Heap-Based Buffer Overflow Vulnerability in Tanium Index
CVE-2026-108307

7.8HIGH

Key Information:

Vendor

Tanium

Status
Endpoint Configuration Toolset Solution
Index-cx
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108307?

A heap-based buffer overflow vulnerability exists in the Tanium Index product, which may allow an attacker to manipulate memory resources, potentially leading to unauthorized access or system instability. It is crucial for users to apply the latest patches provided by Tanium to mitigate the risks associated with this vulnerability. For detailed information on mitigating this issue, refer to the official security advisory at Tanium's site.

Affected Version(s)

Endpoint Configuration Toolset Solution 1.51 < 1.51.60

Endpoint Configuration Toolset Solution 1.59 < 1.59.50

Endpoint Configuration Toolset Solution 1.71 < 1.71.25

References

https://security.tanium.com/TAN-2026-057

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.