tor project
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 16, 2011 to present
19
Total CVEs
8
Critical+High
1
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
45/100
medium
⚠️ 1 Active Exploits⚡ 1 Zero-Days
Severity Distribution
Critical
2High
6Medium
8Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
2
2
Buffer Overflow
1
3
Use After Free
1
Most Affected Products
1. Tor Project Tor36
2. Debian Debian Linux10
3. torproject Tor6
4. debian/tor5
5. Mozilla Firefox3
Recent Vulnerabilities
See more →CVE-2026-44603
CVSS 9.1critical
5/7/2026
CVE-2026-44602
CVSS 7.5high
5/7/2026
CVE-2026-44601
CVSS 7.5high
5/7/2026
CVE-2026-44600
CVSS 5.3medium
5/7/2026
CVE-2026-44599
CVSS 5.3medium
5/7/2026
CVE-2026-44597
CVSS 9.1critical
5/7/2026
https://seclists.org/oss-sec/2026/q2/422
unknown
Vulnerability fixes in Tor 0.4.9.7
5/6/2026🔧 No Patch
CVE-2025-4444
CVSS 6.3medium
Tor Onion Service Descriptor resource consumption
9/18/2025🔧 No Patch
https://www.theregister.com/2025/03/28/google_kaspersky_mozilla/
unknown
After Chrome patches zero-day used to target Russians, Firefox splats similar bug
3/28/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
REDHAT-BUG-2099227
CVSS 4.0medium
6/20/2022🔧 No Patch
Monitor tor project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.