torproject Tor

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
unpatched
by severity
2critical2high2medium0low
updated 2026-10-28
01

vulnerabilities (6)

Related CVEs.

IDseverity exploitable
CVE-2026-44597UScritical9.1—
CVE-2026-44600USmedium5.3—
CVE-2026-44603UScritical9.1—
CVE-2026-44601UShigh7.5—
CVE-2026-44602UShigh7.5—
CVE-2026-44599USmedium5.3—
02

weaknesses (6)

The flaw types (CWEs) most of these CVEs share.

  • CWE-193Off-by-one Error1 CVEs
  • CWE-476NULL Pointer Dereference1 CVEs
  • CWE-669Incorrect Resource Transfer Between Spheres1 CVEs
  • CWE-684Incorrect Provision of Specified Functionality1 CVEs
  • CWE-696Incorrect Behavior Order1 CVEs
  • CWE-837Improper Enforcement of a Single, Unique Action1 CVEs
03

sources (1)

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan