3.1
CVE-2026-75476
- EPSS 0.19%
- Veröffentlicht 19.08.2026 21:17:37
- Zuletzt bearbeitet 20.08.2026 16:18:03
- CVE-Watchlists
- Unerledigt
Tanium addressed a compression bomb vulnerability in Threat Response.
Tanium addressed a compression bomb vulnerability in Threat Response.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerTanium
≫
Produkt
Threat Response
Version
4.9
Version <
4.9.437
Status
affected
Version
4.12
Version <
4.12.308
Status
affected
Version
4.17
Version <
4.17.277
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.087 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 3938794e-25f5-4123-a1ba-5cbd7f104512 | 3.1 | 1.6 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
|
CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
https://security.tanium.com/TAN-2026-021