Torproject vulnerabilities

Products

• Tor 50
• Tor Browser 5

Newest

• torprject tor Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which... CVE-2026-87724 Fix available 6.5 MediumSeptember 9, 2026
• torproject tor tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached... CVE-2026-77642 Fix available 7.5 HighAugust 20, 2026
• torproject tor tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails.... CVE-2026-77641 Fix available 6.5 MediumAugust 20, 2026
• torproject tor tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream... CVE-2026-77640 Fix available 3.7 LowAugust 20, 2026
• torproject tor Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate... CVE-2026-77639 Fix available 5.3 MediumAugust 20, 2026
• torproject tor Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a... CVE-2026-77638 Fix available 8.9 HighAugust 20, 2026
• torproject tor Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object... CVE-2026-77587 Fix available 5.9 MediumAugust 20, 2026
• torproject tor Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already... CVE-2026-77584 Fix available 7.0 HighAugust 20, 2026
• torproject tor Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE... CVE-2026-44603 Fix available 3.7 LowMay 7, 2026
• torproject tor Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka... CVE-2026-44602 Fix available 3.7 LowMay 7, 2026
• torproject tor Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash... CVE-2026-44601 Fix available 3.7 LowMay 7, 2026
• torproject tor Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of... CVE-2026-44600 Fix available 3.7 LowMay 7, 2026
• torproject tor Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. CVE-2026-44599 Fix available 3.7 LowMay 7, 2026
• torproject tor Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a... CVE-2026-44597 Fix available 3.7 LowMay 7, 2026
• torproject tor Tor Onion Service Descriptor resource consumption CVE-2025-4444 Fix available 6.3 MediumSeptember 18, 2025
• torproject tor, debian linux, fedoraproject fedora +2 more The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol... CVE-2023-23589 Fix available 6.5 MediumJanuary 14, 2023
• torproject tor Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation. CVE-2022-33903 Fix available 7.5 HighJune 22, 2022
• torproject tor Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could... CVE-2021-46702 Public exploit 5.5 MediumFebruary 26, 2022
• torproject tor browser Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can... CVE-2021-39246 6.1 MediumSeptember 24, 2021
• torproject tor Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature... CVE-2021-38385 Fix available 7.5 HighAugust 19, 2021
• torproject tor An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service... CVE-2021-34550 Fix available 7.5 HighJune 18, 2021
• torproject tor An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for... CVE-2021-34549 Fix available 7.5 HighJune 18, 2021
• torproject tor An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge... CVE-2021-34548 Fix available 7.5 HighJune 18, 2021
• torproject tor, fedoraproject fedora +1 more Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an... CVE-2021-28090 Fix available 5.3 MediumMarch 16, 2021
• torproject tor, fedoraproject fedora +1 more Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU... CVE-2021-28089 Fix available 7.5 HighMarch 16, 2021
• torproject tor Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service ... CVE-2020-15572 Fix available 7.5 HighJuly 15, 2020
• torproject tor, opensuse backports sle, leap +2 more Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to... CVE-2020-10593 Fix available 7.5 HighMarch 23, 2020
• torproject tor, opensuse backports, leap +2 more Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to... CVE-2020-10592 Fix available 7.5 HighMarch 20, 2020
• torproject tor The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous... CVE-2020-8516 Disputed 5.3 MediumFebruary 2, 2020
• torproject tor browser Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers... CVE-2019-13075 Fix available 5.3 MediumJune 30, 2019
• torproject tor browser Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to... CVE-2019-12383 4.3 MediumMay 28, 2019
• torproject tor In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2... CVE-2019-8955 Fix available 7.5 HighFebruary 21, 2019
• torproject tor browser Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity... CVE-2017-16639 4.3 MediumSeptember 14, 2018
• noscript, torproject tor browser +1 more NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers... CVE-2018-16983 9.8 CriticalSeptember 13, 2018
• torproject tor A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers... CVE-2018-0491 Public exploitFix available EPSS 14.8% 7.5 HighMarch 5, 2018
• torproject tor, debian linux +1 more An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2... CVE-2018-0490 Fix available 7.5 HighMarch 5, 2018
• debian linux, torproject tor, redhat enterprise linux desktop +5 more +7 more Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended... CVE-2017-16541 Public exploitFix available 6.5 MediumNovember 4, 2017
• torproject tor The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x... CVE-2017-0380 Fix available 5.9 MediumSeptember 18, 2017
• torproject tor Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not... CVE-2017-0377 Fix available 7.5 HighJuly 2, 2017
• torproject tor, debian linux +1 more The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure... CVE-2017-0376 Fix available 7.5 HighJune 9, 2017
• torproject tor The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure... CVE-2017-0375 Fix available 7.5 HighJune 9, 2017
• torproject tor, debian linux, fedoraproject fedora +2 more +4 more Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via... CVE-2016-1254 Fix available 7.5 HighDecember 20, 2016
• mozilla firefox, firefox esr, thunderbird +9 more +11 more A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this... CVE-2016-9079 In KEVPublic exploitFix available EPSS 87.4% 7.5 HighNovember 30, 2016
• torproject tor Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to... CVE-2016-8860 Fix available 7.5 HighOctober 18, 2016
• the tor project tor The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,... CVE-2015-2929 Fix available 7.5 HighApril 6, 2015
• the tor project tor The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,... CVE-2015-2928 Fix available 7.5 HighApril 6, 2015
• the tor project tor Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection... CVE-2015-2689 Fix available 7.5 HighMarch 22, 2015
• the tor project tor buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected... CVE-2015-2688 Fix available 7.5 HighMarch 22, 2015
• torproject tor Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound... CVE-2014-5117 Fix available 5.8 MediumJuly 30, 2014
• torproject tor Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure... CVE-2012-2250 Fix available 5.0 MediumFebruary 3, 2014
• Show olderLoading…