Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

torproject / tor_browser CVEs

Beta · best-effort

5 CVEs tagged to torproject / tor_browser — 1 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to torproject vendor archive

CVE-2021-39246

Published Sep 24, 2021

Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. Exact timestamps of these onion-ser…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-13075

Published Jun 30, 2019

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because t…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-12383

Published May 28, 2019

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-16639

Published Sep 14, 2018

Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541.…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-16983

Published Sep 13, 2018

NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1