{"id":"CVE-2026-108307","aliases":[],"title":"Tanium addressed a heap-based buffer overflow vulnerability in Index.","titleSource":"Tanium","descriptionSource":"Tanium","products":[{"vendor":"Tanium","name":"Endpoint Configuration Toolset Solution","platforms":[],"versions":[{"version":"1.51","status":"affected","lessThan":"1.51.60","versionType":"custom"},{"version":"1.59","status":"affected","lessThan":"1.59.50","versionType":"custom"},{"version":"1.71","status":"affected","lessThan":"1.71.25","versionType":"custom"}],"source":"Tanium","url":"https://www.cve.org/CVERecord?id=CVE-2026-108307"},{"vendor":"Tanium","name":"index-cx","platforms":[],"versions":[{"version":"3.9.520","status":"affected","lessThan":"3.9.520","versionType":"semver"},{"version":"3.11.443","status":"affected","lessThan":"3.11.443","versionType":"semver"},{"version":"3.14.921","status":"affected","lessThan":"3.14.921","versionType":"semver"},{"version":"3.14.917","status":"affected","lessThan":"3.14.917","versionType":"semver"},{"version":"3.15.2420","status":"affected","lessThan":"3.15.2420","versionType":"semver"},{"version":"3.16.984","status":"affected","lessThan":"3.16.984","versionType":"semver"}],"source":"Tanium","url":"https://www.cve.org/CVERecord?id=CVE-2026-108307"}],"remediation":[],"description":"Tanium addressed a heap-based buffer overflow vulnerability in Index.","severity":"high","score":7.8,"published":"2026-10-27T17:33:55.273Z","modified":"2026-10-27T17:33:55.273Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://security.tanium.com/TAN-2026-057"],"sources":[{"name":"CVE","id":"CVE-2026-108307","modified":"2026-10-27T17:33:55.273Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-108307"}],"assessments":[{"source":"Tanium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T02:15:32.063Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}