« Volver al listado

CVE-2026-2408

Estado: AnalizadaMedia (4.7)—

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Tanium — Cloud Workloads

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-2408",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-2408",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-03-02T15:54:55.216169Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_cloudworkloads:1.0.221:*:*:*:*:*:*:*"
          ],
          "vendor": "Tanium",
          "product": "Cloud Workloads",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.222",
              "lessThan": "1.0.222",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-02-20T00:16:17.930",
  "references": [
    {
      "url": "https://security.tanium.com/TAN-2026-005",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension."
    },
    {
      "lang": "es",
      "value": "Tanium abordó una vulnerabilidad de uso después de liberación en la extensión de cliente de Cloud Workloads Enforce."
    }
  ],
  "lastModified": "2026-06-17T10:30:54.513",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tanium:cloud_workloads:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92362DBC-238B-4862-9D23-84434624F0FB",
              "versionEndExcluding": "1.0.222"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512"
}