[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJI8NOrMXMRT4TfMl9TDiGeUD6HAV91DtfxrNhgZOGQA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":89,"topProductsByCves":95,"seoMetadata":98,"meta":107},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":28},32312,"torproject",2,40,1,492,"2023-01-14","t",[16,21],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},163814,"tor",445,35,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},163815,"tor_browser",47,5,0,"2021-09-24","Torproject is a technology vendor with 2 tracked products and 40 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[30,38,45,50,57,62,68,75,80,85],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":37},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",7.5,"v3.1","High",0.87536,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":34,"cvssVersion":42,"severity":36,"isKev":43,"epssScore":44},"CVE-2018-0491","A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.","2018-03-05","v3.0",false,0.1479,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":34,"cvssVersion":42,"severity":36,"isKev":43,"epssScore":49},"CVE-2019-8955","In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.","2019-02-21",0.04572,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":35,"severity":55,"isKev":43,"epssScore":56},"CVE-2017-16541","Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:\u002F\u002F mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.","2017-11-04",6.5,"Medium",0.03662,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":43,"epssScore":61},"CVE-2020-10592","Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.","2020-03-23",0.03225,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":25,"cvssVersion":66,"severity":55,"isKev":43,"epssScore":67},"CVE-2012-5573","The connection_edge_process_relay_cell function in or\u002Frelay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.","2013-01-01","v2",0.03146,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":42,"severity":73,"isKev":43,"epssScore":74},"CVE-2018-16983","NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text\u002Fhtml;\u002Fjson Content-Type value.","2018-09-13",9.8,"Critical",0.0312,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":34,"cvssVersion":42,"severity":36,"isKev":43,"epssScore":79},"CVE-2016-1254","Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.","2017-12-05",0.03004,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":43,"epssScore":84},"CVE-2021-34548","An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.","2021-06-29",0.02721,{"cveId":86,"description":87,"publishedDate":41,"cvssScore":34,"cvssVersion":42,"severity":36,"isKev":43,"epssScore":88},"CVE-2018-0490","An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotocol implementation allows remote attackers to cause a denial of service (NULL pointer dereference and directory-authority crash) via a misformatted relay descriptor that is mishandled during voting.",0.02641,[90],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":37,"cisaVulnName":91,"cisaDateAdded":92,"cisaShortDescription":93,"cisaRequiredAction":94},"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","2023-06-22","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","Apply updates per vendor instructions.",[96,97],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":26,"last_cve_update":27},{"title":99,"metaDescription":100,"keywords":101,"structuredData":102},"Torproject - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Torproject covering 2 products with 40 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Torproject vulnerabilities, Torproject security, Torproject CVE, Torproject threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Torproject KEV, Torproject exploited vulnerabilities",{"@context":103,"@type":104,"name":105,"description":100,"url":106},"https:\u002F\u002Fschema.org","Organization","Torproject","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftorproject",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":108,"apiVersion":109},"2026-10-18T14:29:04.263Z","3.0"]