How severe is CVE-2025-15320?

CVE-2025-15320 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2025-15320 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (1st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-15320?

CVE-2025-15320 affects Tanium. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-15320?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-15320 have an EU (EUVD) identifier?

Yes. CVE-2025-15320 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-206878.

When was CVE-2025-15320 published?

CVE-2025-15320 was published on 2026-02-06 and last updated on 2026-06-17.

CVE-2025-15320

CVE-2025-15320 is a low-severity vulnerability in Tanium with a CVSS 3.x base score of 3.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-605.

Key facts

Severity: Low (CVSS 3.x base score 3.3)
EPSS exploit prediction: 0% (1st percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-206878
Weakness: CWE-605
Affected product: Tanium
Published: 2026-02-06
Last modified: 2026-06-17

Description

Tanium addressed a denial of service vulnerability in Tanium Client.

Frequently asked questions

What is CVE-2025-15320?: Tanium addressed a denial of service vulnerability in Tanium Client.
How severe is CVE-2025-15320?: CVE-2025-15320 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2025-15320 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (1st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-15320?: CVE-2025-15320 affects Tanium. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-15320?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-15320 have an EU (EUVD) identifier?: Yes. CVE-2025-15320 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-206878.
When was CVE-2025-15320 published?: CVE-2025-15320 was published on 2026-02-06 and last updated on 2026-06-17.

References

https://security.tanium.com/TAN-2025-023

Affected products (1)

cpe:2.3:a:tanium:tanium:*:*:*:*:*:*:*:*

Other CWE-605 vulnerabilities

CVE-2026-25086 — High (CVSS 7.7): Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to…
CVE-2024-30218 — Medium (CVSS 6.5): The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users…

Browse all CWE-605 vulnerabilities →