CVE-2025-15310 - Vulnerability Details - OpenCVE

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Tanium	Endpoint Patch Patch Endpoint Tools

No data.

No data.

References

Link	Providers
https://www.spirityenterprise.com/virtual-ciso
https://www.spirityenterprise.com/mdr-for-endpoint
https://security.tanium.com/TAN-2025-001

History

Tue, 10 Feb 2026 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tanium patch Endpoint Tools
Vendors & Products		Tanium patch Endpoint Tools

Tue, 10 Feb 2026 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 09 Feb 2026 23:30:00 +0000

Type	Values Removed	Values Added
Description		Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Title		Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
First Time appeared		Tanium Tanium endpoint Patch
Weaknesses		CWE-59
CPEs		cpe:2.3:a:tanium:endpoint_patch:10.1.32:::::::* cpe:2.3:a:tanium:endpoint_patch:10.2.21:::::::* cpe:2.3:a:tanium:endpoint_patch:3.17.10194:::::::*
Vendors & Products		Tanium Tanium endpoint Patch
References		https://security.tanium.com/TAN-2025-001
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Tanium

Published: 2026-02-09T23:00:51.789Z

Updated: 2026-02-10T20:17:29.236Z

Reserved: 2025-12-29T23:12:52.477Z

Link: CVE-2025-15310

Vulnrichment

Updated: 2026-02-10T20:17:26.143Z

NVD

Status : Awaiting Analysis

Published: 2026-02-10T00:16:05.370

Modified: 2026-02-10T15:22:54.740

Link: CVE-2025-15310

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-15310", "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512", "state": "PUBLISHED", "assignerShortName": "Tanium", "dateReserved": "2025-12-29T23:12:52.477Z", "datePublished": "2026-02-09T23:00:51.789Z", "dateUpdated": "2026-02-10T20:17:29.236Z"}, "containers": {"cna": {"affected": [{"product": "Patch Endpoint Tools", "vendor": "Tanium", "versions": [{"version": "3.17.0", "status": "affected", "lessThan": "3.17.10195", "versionType": "custom"}, {"version": "10.1.0", "status": "affected", "lessThan": "10.1.33", "versionType": "custom"}, {"version": "10.2.0", "status": "affected", "lessThan": "10.2.22", "versionType": "custom"}], "cpes": ["cpe:2.3:a:tanium:endpoint_patch:3.17.10194:*:*:*:*:*:*:*", "cpe:2.3:a:tanium:endpoint_patch:10.1.32:*:*:*:*:*:*:*", "cpe:2.3:a:tanium:endpoint_patch:10.2.21:*:*:*:*:*:*:*"]}], "credits": [{"lang": "en", "type": "reporter", "value": "Filip Magic"}], "dateAssigned": "2025-12-29T23:12:52.295Z", "datePublic": "2025-01-14T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools."}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-59", "description": "Improper Link Resolution Before File Access ('Link Following')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512", "shortName": "Tanium", "dateUpdated": "2026-02-09T23:11:05.748Z"}, "references": [{"name": "TAN-2025-001", "url": "https://security.tanium.com/TAN-2025-001"}], "title": "Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools."}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-10T20:17:22.301449Z", "id": "CVE-2025-15310", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-10T20:17:29.236Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.", "credits": [{"lang": "en", "type": "reporter", "value": "Filip Magic"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"cpes": ["cpe:2.3:a:tanium:endpoint_patch:3.17.10194:*:*:*:*:*:*:*", "cpe:2.3:a:tanium:endpoint_patch:10.1.32:*:*:*:*:*:*:*", "cpe:2.3:a:tanium:endpoint_patch:10.2.21:*:*:*:*:*:*:*"], "vendor": "Tanium", "product": "Patch Endpoint Tools", "versions": [{"status": "affected", "version": "3.17.0", "lessThan": "3.17.10195", "versionType": "custom"}, {"status": "affected", "version": "10.1.0", "lessThan": "10.1.33", "versionType": "custom"}, {"status": "affected", "version": "10.2.0", "lessThan": "10.2.22", "versionType": "custom"}]}], "datePublic": "2025-01-14T00:00:00.000Z", "references": [{"url": "https://security.tanium.com/TAN-2025-001", "name": "TAN-2025-001"}], "dateAssigned": "2025-12-29T23:12:52.295Z", "descriptions": [{"lang": "en", "value": "Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-59", "description": "Improper Link Resolution Before File Access ('Link Following')"}]}], "providerMetadata": {"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512", "shortName": "Tanium", "dateUpdated": "2026-02-09T23:11:05.748Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-15310", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-10T20:17:22.301449Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-02-10T20:17:26.143Z"}}]}, "cveMetadata": {"cveId": "CVE-2025-15310", "state": "PUBLISHED", "dateUpdated": "2026-02-09T23:11:05.748Z", "dateReserved": "2025-12-29T23:12:52.477Z", "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512", "datePublished": "2026-02-09T23:00:51.789Z", "assignerShortName": "Tanium"}, "dataVersion": "5.2"}