TO
Product
Tor
On CISA KEVExploited in the wild
48
CVEs
1
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 4High 27Medium 10Low 0
Watch
Add Tor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77642 | 9.3 | Aug 20 | tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type Affected: 0.2.8.2-alpha before 0.4.9.9 |
| CVE-2026-44603 | 9.1 | May 7 | Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007 Affected: before 0.4.9.7 |
| CVE-2026-44597 | 9.1 | May 7 | Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011 Affected: before 0.4.9.7 |
| CVE-2026-77638 | 9.0 | Aug 20 | Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client… Affected: 0.3.5.3-alpha before 0.4.9.11 |
Showing 4