Where
-Infinity
0

Trending

Last week
Last month
Last year

Tor Project TorTor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-…

Risk 66
Severity
9.1
First published (updated )
CVE-2026-44603

Tor Project TorNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2026-44602

Tor Project TorTor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because…

Risk 43
Severity
7.5
First published (updated )
CVE-2026-44601

Tor Project TorTor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a …

Risk 27
Severity
5.3
First published (updated )
CVE-2026-44600

Tor Project TorTor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.

Risk 27
Severity
5.3
First published (updated )
CVE-2026-44599
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tor Project TorTor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a re…

Risk 66
Severity
9.1
First published (updated )
CVE-2026-44597

oss-secVulnerability fixes in Tor 0.4.9.7

First published (updated )
https://seclists.org/oss-sec/2026/q2/422

Debian Debian LinuxThe SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol ca…

Risk 40
Severity
6.5
First published (updated )
CVE-2023-23589

torproject TorTor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allo…

Risk 32
Severity
5.5
First published (updated )
CVE-2021-46702

torproject TorBuffer Overflow

Risk 43
Severity
7.5
First published (updated )
CVE-2021-34550
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

torproject TorAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-34549

torproject TorAn issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END o…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-34548

torproject TorTor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an asser…

Risk 27
Severity
5.3
First published (updated )
CVE-2021-28090

torproject TorTor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resource…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-28089

torproject TorTor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash)…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-15572
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

torproject TorTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cau…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-10593

torproject TorTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cau…

Risk 44
Severity
7.8
First published (updated )
CVE-2020-10592

torproject Torbuf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected ar…

Risk 43
Severity
7.5
First published (updated )
CVE-2015-2688

torproject TorInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2015-2689

torproject TorThe Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0…

Risk 43
Severity
7.5
First published (updated )
CVE-2015-2929
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

torproject TorThe Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0…

Risk 43
Severity
7.5
First published (updated )
CVE-2015-2928

torproject TorIn Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-al…

Risk 43
Severity
7.5
First published (updated )
CVE-2019-8955

torproject TorNull Pointer Dereference

Risk 43
Severity
7.5
First published (updated )
CVE-2018-0490

torproject TorUse After Free

Risk 43
Severity
7.5
First published (updated )
CVE-2018-0491

redhat Enterprise Linux EusInfoleak

Risk 39
Severity
6.5
First published (updated )
CVE-2017-16541
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

torproject TorThe rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x befo…

Risk 35
Severity
5.9
First published (updated )
CVE-2017-0380

torproject TorInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2017-0377

Debian Debian LinuxThe hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and d…

Risk 43
Severity
7.5
First published (updated )
CVE-2017-0376

torproject TorThe hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and d…

Risk 43
Severity
7.5
First published (updated )
CVE-2017-0375

torproject TorBuffer Overflow

Risk 43
Severity
7.5
First published (updated )
CVE-2016-8860
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203