{"affected":[{"product":"Endpoint Configuration Toolset Solution","source":"CNA: Tanium","vendor":"Tanium","versions":[{"lessThan":"1.51.60","status":"affected","version":"1.51","versionType":"custom"},{"lessThan":"1.59.50","status":"affected","version":"1.59","versionType":"custom"},{"lessThan":"1.71.25","status":"affected","version":"1.71","versionType":"custom"}]},{"product":"end-user-cx","source":"CNA: Tanium","vendor":"Tanium","versions":[{"lessThan":"1.8.47","status":"affected","version":"1.8.47","versionType":"semver"},{"lessThan":"1.11.605","status":"affected","version":"1.11.605","versionType":"semver"},{"lessThan":"1.19.325","status":"affected","version":"1.19.325","versionType":"semver"},{"lessThan":"1.21.835","status":"affected","version":"1.21.835","versionType":"semver"},{"lessThan":"1.22.1199","status":"affected","version":"1.22.1199","versionType":"semver"},{"lessThan":"1.23.766","status":"affected","version":"1.23.766","versionType":"semver"},{"lessThan":"1.24.590","status":"affected","version":"1.24.590","versionType":"semver"}]}],"cveId":"CVE-2026-108304","cwes":["CWE-59","CWE-282"],"description":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","epss":{"date":"2026-11-04","percentile":0.01917,"score":0.00121},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: Tanium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793813745378,"publishedAt":1793122524064,"references":[{"source":"CNA: Tanium","tags":[],"url":"https://security.tanium.com/TAN-2026-058"}],"remediation":[],"revision":"de138c496275555b28c0fa576212b2c658e83a7a821baf79e7b674d010f6d951","sources":[{"modifiedAt":1793813745378,"name":"CNA: Tanium","retrievedAt":1793815723493,"url":"https://www.cve.org/CVERecord?id=CVE-2026-108304"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793815816771,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108304"}],"ssvc":{"assessedAt":1793813695798,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Tanium addressed a local privilege escalation vulnerability in End-User Notifications.","updatedAt":1793815816771}