CVE-2026-108305
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications. The flaw may allow a local user to gain higher privileges on the system.
Risk Assessment
A local attacker may escalate privileges, potentially leading to full system compromise. This could compromise integrity and confidentiality of data on the device.
Recommendation
Deploy the update released by Tanium for the End-User Notifications module. Restrict local access to devices to trusted users.
Other vulnerabilities in Tanium End-User Notifications
See all- CVE-2026-108306High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications. The flaw may allow a local user to gain higher privileges on the system.
- CVE-2026-108304High
Tanium addressed a local privilege escalation vulnerability in End-User Notifications. The flaw may allow a local user to gain higher privileges on the system.
Original NVD description (English source)
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS