Torproject

Tor Browser

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2021-39246

Exploit
  • EPSS 0.11%
  • Published 24.09.2021 19:15:07
  • Last modified 21.11.2024 06:19:00

Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. Exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compar...

5.3

CVE-2019-13075

Exploit
  • EPSS 0.15%
  • Published 30.06.2019 14:15:09
  • Last modified 21.11.2024 04:24:08

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK eleme...

4.3

CVE-2019-12383

  • EPSS 0.74%
  • Published 28.05.2019 03:29:00
  • Last modified 21.11.2024 04:22:43

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.

4.3

CVE-2017-16639

Exploit
  • EPSS 0.59%
  • Published 14.09.2018 21:29:03
  • Last modified 21.11.2024 03:16:44

Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.

9.8

CVE-2018-16983

  • EPSS 0.4%
  • Published 13.09.2018 04:29:00
  • Last modified 21.11.2024 03:53:38

NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.