Advisories · Technology

Tor.

Every CVE that names Tor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87724 CVE record

CVSS 6.5 Medium

Tor: Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not…
- Tor
- CWE-669
Not analysed yet 9 Sept 2026
CVE-2026-77642 CVE record

CVSS 7.5 High

Out-of-bounds write in Tor
- Tor
- Memory corruption
Not analysed yet 20 Aug 2026
CVE-2026-77641 CVE record

CVSS 6.5 Medium

Unchecked return value in Tor
- Tor
- CWE-252
Not analysed yet 20 Aug 2026
CVE-2026-77640 CVE record

CVSS 3.7 Low

Tor: tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip…
- Tor
- CWE-1284
Not analysed yet 20 Aug 2026
CVE-2026-77639 CVE record

CVSS 5.3 Medium

Tor: Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could…
- Tor
- CWE-420
Not analysed yet 20 Aug 2026
CVE-2026-77638 CVE record

CVSS 8.9 High

Race condition in Tor
- Tor
- Race condition
Not analysed yet 20 Aug 2026
CVE-2026-77587 CVE record

CVSS 5.9 Medium

Tor: Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux…
- Tor
- CWE-911
Not analysed yet 20 Aug 2026
CVE-2026-77584 CVE record

CVSS 7.0 High

Tor: Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which…
- Tor
- CWE-821
Not analysed yet 20 Aug 2026
CVE-2026-44603 CVE record

CVSS 3.7 Low

Off-by-one error in Tor
- Tor
- CWE-193
Not analysed yet 7 May 2026
CVE-2026-44602 CVE record

CVSS 3.7 Low

NULL pointer dereference in Tor
- Tor
- Memory corruption
Not analysed yet 7 May 2026
CVE-2026-44601 CVE record

CVSS 3.7 Low

Tor: Tor before 0.4.9.7, when circuit queue memory pressure exists…
- Tor
- CWE-837
Not analysed yet 7 May 2026
CVE-2026-44600 CVE record

CVSS 3.7 Low

Tor: Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the…
- Tor
- CWE-696
Not analysed yet 7 May 2026
CVE-2026-44599 CVE record

CVSS 3.7 Low

Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
- Tor
- CWE-669
Not analysed yet 7 May 2026
CVE-2026-44597 CVE record

CVSS 3.7 Low

Tor: Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE…
- Tor
- CWE-684
Not analysed yet 7 May 2026
CVE-2025-4444 CVE record

CVSS 6.3 Medium

Tor Onion Service Descriptor resource consumption
- Tor
- Denial of service
Not analysed yet 18 Sept 2025
CVE-2015-2688 CVE record

Tor: buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle…
- Tor
Not analysed yet 24 Jan 2020
CVE-2015-2689 CVE record

Tor: Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle…
- Tor
Not analysed yet 24 Jan 2020
CVE-2015-2929 CVE record

Tor: The Hidden Service (HS) client implementation in Tor before 0.2.4.27…
- Tor
Not analysed yet 24 Jan 2020
CVE-2015-2928 CVE record

Tor: The Hidden Service (HS) server implementation in Tor before 0.2.4.27…
- Tor
Not analysed yet 24 Jan 2020
CVE-2018-0491 CVE record

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10.
- Tor
Not analysed yet 5 Mar 2018
CVE-2018-0490 CVE record

Tor: An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10…
- Tor
Not analysed yet 5 Mar 2018
CVE-2017-0377 CVE record

Tor: Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit…
- Tor
Not analysed yet 2 Jul 2017