Torproject vulnerabilities
Published CVEs affecting Torproject products: 7 record(s), with severity, exploitation and fixes.
CVE-2026-44603
Critical · 9.1
CWE-193 May 7, 2026
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka…
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.
CVE-2026-44602
High · 7.5
CWE-476 May 7, 2026
NULL Pointer Dereference in Torproject Tor
Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.
CVE-2026-44601
High · 7.5
CWE-837 May 7, 2026
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client…
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.
CVE-2026-44600
Medium · 5.3
CWE-696 May 7, 2026
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the…
Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.
CVE-2026-44599
Medium · 5.3
CWE-669 May 7, 2026
Incorrect Resource Transfer Between Spheres in Torproject Tor
Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008.
CVE-2026-44597
Critical · 9.1
CWE-684 May 6, 2026
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED…
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.
CVE-2016-9079
High · 7.5
KEV Urgent · 79 Public exploit CWE-416 Jun 11, 2018
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.