# Tor. Every CVE that names Tor among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Tor: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not…](https://agentprime.io/advisories/CVE-2026-87724.md) `CVE-2026-87724` · CVE record: torprject Tor · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-669 - [Out-of-bounds write in Tor](https://agentprime.io/advisories/CVE-2026-77642.md) `CVE-2026-77642` · CVE record: torproject Tor · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption - [Unchecked return value in Tor](https://agentprime.io/advisories/CVE-2026-77641.md) `CVE-2026-77641` · CVE record: torproject Tor · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-252 - [Tor: tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip…](https://agentprime.io/advisories/CVE-2026-77640.md) `CVE-2026-77640` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-1284 - [Tor: Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could…](https://agentprime.io/advisories/CVE-2026-77639.md) `CVE-2026-77639` · CVE record: torproject Tor · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-420 - [Race condition in Tor](https://agentprime.io/advisories/CVE-2026-77638.md) `CVE-2026-77638` · CVE record: torproject Tor · CVSS 8.9 High · Not analysed yet · Published 20 Aug 2026 · Tags: Race condition - [Tor: Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux…](https://agentprime.io/advisories/CVE-2026-77587.md) `CVE-2026-77587` · CVE record: torproject Tor · CVSS 5.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-911 - [Tor: Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which…](https://agentprime.io/advisories/CVE-2026-77584.md) `CVE-2026-77584` · CVE record: torproject Tor · CVSS 7.0 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-821 - [Off-by-one error in Tor](https://agentprime.io/advisories/CVE-2026-44603.md) `CVE-2026-44603` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-193 - [NULL pointer dereference in Tor](https://agentprime.io/advisories/CVE-2026-44602.md) `CVE-2026-44602` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: Memory corruption - [Tor: Tor before 0.4.9.7, when circuit queue memory pressure exists…](https://agentprime.io/advisories/CVE-2026-44601.md) `CVE-2026-44601` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-837 - [Tor: Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the…](https://agentprime.io/advisories/CVE-2026-44600.md) `CVE-2026-44600` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-696 - [Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.](https://agentprime.io/advisories/CVE-2026-44599.md) `CVE-2026-44599` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-669 - [Tor: Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE…](https://agentprime.io/advisories/CVE-2026-44597.md) `CVE-2026-44597` · CVE record: torproject Tor · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: CWE-684 - [Tor Onion Service Descriptor resource consumption](https://agentprime.io/advisories/CVE-2025-4444.md) `CVE-2025-4444` · CVE record: Tor · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2025 · Tags: Denial of service - [Tor: buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle…](https://agentprime.io/advisories/CVE-2015-2688.md) `CVE-2015-2688` · CVE record: The Tor Project Tor · No CVSS score · Not analysed yet · Published 24 Jan 2020 - [Tor: Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle…](https://agentprime.io/advisories/CVE-2015-2689.md) `CVE-2015-2689` · CVE record: The Tor Project Tor · No CVSS score · Not analysed yet · Published 24 Jan 2020 - [Tor: The Hidden Service (HS) client implementation in Tor before 0.2.4.27…](https://agentprime.io/advisories/CVE-2015-2929.md) `CVE-2015-2929` · CVE record: The Tor Project Tor · No CVSS score · Not analysed yet · Published 24 Jan 2020 - [Tor: The Hidden Service (HS) server implementation in Tor before 0.2.4.27…](https://agentprime.io/advisories/CVE-2015-2928.md) `CVE-2015-2928` · CVE record: The Tor Project Tor · No CVSS score · Not analysed yet · Published 24 Jan 2020 - [A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10.](https://agentprime.io/advisories/CVE-2018-0491.md) `CVE-2018-0491` · CVE record: Tor · No CVSS score · EPSS 0.15 · Not analysed yet · Published 5 Mar 2018 - [Tor: An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10…](https://agentprime.io/advisories/CVE-2018-0490.md) `CVE-2018-0490` · CVE record: Tor · No CVSS score · Not analysed yet · Published 5 Mar 2018 - [Tor: Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit…](https://agentprime.io/advisories/CVE-2017-0377.md) `CVE-2017-0377` · CVE record: Tor · No CVSS score · Not analysed yet · Published 2 Jul 2017 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .