Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how tor project compares to other vendors in security performance

View Risk Score →

Tor Project TorTor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-…

Risk 66
Severity
9.1
First published (updated )
CVE-2026-44603

Tor Project TorNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2026-44602

Tor Project TorTor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because…

Risk 43
Severity
7.5
First published (updated )
CVE-2026-44601

Tor Project TorTor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a …

Risk 27
Severity
5.3
First published (updated )
CVE-2026-44600

Tor Project TorTor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Risk 27
Severity
5.3
First published (updated )
CVE-2026-44599
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tor Project TorTor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a re…

Risk 66
Severity
9.1
First published (updated )
CVE-2026-44597

oss-secVulnerability fixes in Tor 0.4.9.7

First published (updated )
https://seclists.org/oss-sec/2026/q2/422

Tor Project TorTor Onion Service Descriptor resource consumption

Risk 29
Severity
6.3
First published (updated )
CVE-2025-4444

The RegisterAfter Chrome patches zero-day used to target Russians, Firefox splats similar bug

Exploited
Zeroday
First published (updated )
News
The Register

Tor Project TorA Denial of Service issue was fixed in tor 0.4.7.8 related to congestion control. RTT estimation can…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-2099227
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tor Project TorIn Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3…

Risk 43
Severity
7.5
First published (updated )
CVE-2017-8819

Tor Project TorNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2017-8820

Tor Project TorBuffer Overflow

Risk 43
Severity
7.5
First published (updated )
CVE-2017-8821

Tor Project TorUse After Free

Risk 75
Severity
8.1
First published (updated )
CVE-2017-8823

Tor Project TorIn Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3…

Risk 22
Severity
4.3
First published (updated )
CVE-2017-8822
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tor Project Tor BrowserTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-1510816

BleepingComputerTorMoil Vulnerability Leaks Real IP Address from Tor Browser Users

First published (updated )
News
BleepingComputer

Tor Project TorIt was reported [1],[2] that Tor suffered from a denial of service vulnerability due to an error whe…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-880310

Tor Project TorA vulnerability in Tor was reported [1] that could allow a malicious remote attacker to cause a deni…

Risk 18
Severity
4
First published (updated )
REDHAT-BUG-705192

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203