Skip to content
Torproject Tor vulnerabilities
-
torprject tor
Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which...
CVE-2026-87724
Fix available
6.5 Medium
-
torproject tor
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached...
CVE-2026-77642
Fix available
7.5 High
-
torproject tor
tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails....
CVE-2026-77641
Fix available
6.5 Medium
-
torproject tor
tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream...
CVE-2026-77640
Fix available
3.7 Low
-
torproject tor
Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate...
CVE-2026-77639
Fix available
5.3 Medium
-
torproject tor
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a...
CVE-2026-77638
Fix available
8.9 High
-
torproject tor
Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object...
CVE-2026-77587
Fix available
5.9 Medium
-
torproject tor
Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already...
CVE-2026-77584
Fix available
7.0 High
-
torproject tor
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE...
CVE-2026-44603
Fix available
3.7 Low
-
torproject tor
Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka...
CVE-2026-44602
Fix available
3.7 Low
-
torproject tor
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash...
CVE-2026-44601
Fix available
3.7 Low
-
torproject tor
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of...
CVE-2026-44600
Fix available
3.7 Low
-
torproject tor
Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
CVE-2026-44599
Fix available
3.7 Low
-
torproject tor
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a...
CVE-2026-44597
Fix available
3.7 Low
-
torproject tor
Tor Onion Service Descriptor resource consumption
CVE-2025-4444
Fix available
6.3 Medium
-
torproject tor, debian linux, fedoraproject fedora +2 more
The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol...
CVE-2023-23589
Fix available
6.5 Medium
-
torproject tor
Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.
CVE-2022-33903
Fix available
7.5 High
-
torproject tor
Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could...
CVE-2021-46702
Public exploit
5.5 Medium
-
torproject tor browser
Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can...
CVE-2021-39246
6.1 Medium
-
torproject tor
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature...
CVE-2021-38385
Fix available
7.5 High
-
torproject tor
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service...
CVE-2021-34550
Fix available
7.5 High
-
torproject tor
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for...
CVE-2021-34549
Fix available
7.5 High
-
torproject tor
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge...
CVE-2021-34548
Fix available
7.5 High
-
torproject tor, fedoraproject fedora +1 more
Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an...
CVE-2021-28090
Fix available
5.3 Medium
-
torproject tor, fedoraproject fedora +1 more
Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU...
CVE-2021-28089
Fix available
7.5 High
-
torproject tor
Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service ...
CVE-2020-15572
Fix available
7.5 High
-
torproject tor, opensuse backports sle, leap +2 more
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...
CVE-2020-10593
Fix available
7.5 High
-
torproject tor, opensuse backports, leap +2 more
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...
CVE-2020-10592
Fix available
7.5 High
-
torproject tor
The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous...
CVE-2020-8516
Disputed
5.3 Medium
-
torproject tor browser
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers...
CVE-2019-13075
Fix available
5.3 Medium
-
torproject tor browser
Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to...
CVE-2019-12383
4.3 Medium
-
torproject tor
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2...
CVE-2019-8955
Fix available
7.5 High
-
torproject tor browser
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity...
CVE-2017-16639
4.3 Medium
-
noscript, torproject tor browser +1 more
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers...
CVE-2018-16983
9.8 Critical
-
torproject tor
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers...
CVE-2018-0491
Public exploitFix available
EPSS 14.8%
7.5 High
-
torproject tor, debian linux +1 more
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2...
CVE-2018-0490
Fix available
7.5 High
-
debian linux, torproject tor, redhat enterprise linux desktop +5 more +7 more
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...
CVE-2017-16541
Public exploitFix available
6.5 Medium
-
torproject tor
The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x...
CVE-2017-0380
Fix available
5.9 Medium
-
torproject tor
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not...
CVE-2017-0377
7.5 High
-
torproject tor, debian linux +1 more
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure...
CVE-2017-0376
Fix available
7.5 High
-
torproject tor
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure...
CVE-2017-0375
7.5 High
-
torproject tor, debian linux, fedoraproject fedora +2 more +4 more
Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via...
CVE-2016-1254
Fix available
7.5 High
-
mozilla firefox, firefox esr, thunderbird +9 more +11 more
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...
CVE-2016-9079
In KEVPublic exploitFix available
EPSS 87.4%
7.5 High
-
torproject tor
Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to...
CVE-2016-8860
Fix available
7.5 High
-
the tor project tor
The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,...
CVE-2015-2929
Fix available
7.5 High
-
the tor project tor
The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,...
CVE-2015-2928
Fix available
7.5 High
-
the tor project tor
Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection...
CVE-2015-2689
Fix available
7.5 High
-
the tor project tor
buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected...
CVE-2015-2688
Fix available
7.5 High
-
torproject tor
Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound...
CVE-2014-5117
Fix available
5.8 Medium
-
torproject tor
Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure...
CVE-2012-2250
Fix available
5.0 Medium
- Show olderLoading…