{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ataniumend-user_notifications/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:tanium:end-user_notifications:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-108304"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["End-User Notifications"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Tanium"],"content_html":"\u003cp\u003eTanium has released a patch for a local privilege escalation vulnerability (CVE-2026-108304) affecting the End-User Notifications component. This vulnerability allows an attacker who already possesses low-privileged access to a system to gain elevated privileges. Details regarding the specific exploit path or the vulnerable version range are currently limited.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability carries a CVSS v3.1 base score of 7.8, indicating the potential for successful exploitation to significantly increase a user's privilege level on the host system.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all systems running Tanium End-User Notifications to identify exposure.\u003c/li\u003e\n\u003cli\u003eApply the latest security updates provided by Tanium to address CVE-2026-108304 immediately.\u003c/li\u003e\n\u003cli\u003eMonitor local system logs for unauthorized attempts to interact with Tanium service processes or modifications to component configuration files by non-administrator users.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T20:01:46Z","date_published":"2026-10-27T20:01:46Z","id":"https://feed.craftedsignal.io/briefs/2026-10-tanium-lpe/","summary":"Tanium addressed a local privilege escalation vulnerability in the End-User Notifications component that allows low-privileged users to elevate privileges on affected hosts.","title":"Tanium End-User Notifications: Local privilege escalation (CVE-2026-108304)","url":"https://feed.craftedsignal.io/briefs/2026-10-tanium-lpe/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:tanium:end-User_notifications:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}