Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: torproject Tor 0.4.9.11 Clear all filters
TI-2026-54108 CVE-2026-77638 · GHSA-pq38-gw56-4w65

Race condition in torproject Tor

Priority MEDIUM 41

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00299 Published 2026-08-20 Fixed in 0.4.9.11 CWE-362
TI-2026-54088 CVE-2026-77587 · GHSA-9mf5-x83c-fg2x

Use after free in torproject Tor

Priority LOW 33

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00405 Published 2026-08-20 Fixed in 0.4.9.11 CWE-911