How many CVEs does Tor tor browser have?

Tor tor browser has 5 published CVE records since 2018.

How many Tor tor browser CVEs are in CISA KEV?

None of Tor tor browser's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Tor tor browser vulnerabilities?

Yes — 4 of Tor tor browser's CVEs have a known public exploit.

Which versions of Tor tor browser are affected?

8 distinct Tor tor browser versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tor tor browser CVEs?

Tor tor browser's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-203 (Observable Discrepancy), CWE-532 (Insertion of Sensitive Information into Log File).

How many critical Tor tor browser vulnerabilities are there?

Tor tor browser has 1 critical and 0 high-severity CVEs.

What is the average severity of Tor tor browser CVEs?

The average CVSS base score across Tor tor browser's scored CVEs is 6.0.

tor browser Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: tor browser vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

tor browser Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

tor browser has 5 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.0. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of tor browser's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of tor browser's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4 of tor browser's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every tor browser version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 8.01 CVE
< 8.0.11 CVE
<= 10.5.61 CVE
<= 8.5.31 CVE
11.0 <= v <= 11.01 CVE
7.0.0 <= v <= 7.0.111 CVE

Fixed in

8.01 CVE
8.0.11 CVE

Find a version

5 CVEs

Sort

Medium vulnerability · 2021-09-24
CVE-2021-39246
Public exploit
Patch
CWE-532
Medium · CVSS 6.1
EPSS 0.5% (40th pct)2021-09-24
Medium vulnerability · 2019-06-30
CVE-2019-13075
Public exploit
Patch
CWE-200
Medium · CVSS 5.3
EPSS 1.9% (79th pct)2019-06-30
Medium vulnerability · 2019-05-28
CVE-2019-12383
Patch
CWE-203
Medium · CVSS 4.3
EPSS 2.2% (82th pct)2019-05-28
Medium vulnerability · 2018-09-14
CVE-2017-16639
Public exploit
Patch
CWE-200
Medium · CVSS 4.3
EPSS 2.4% (83th pct)2018-09-14
Critical vulnerability · 2018-09-13
CVE-2018-16983
Public exploit
Patch
Critical · CVSS 9.8
EPSS 3.1% (88th pct)2018-09-13

Common weakness types

The CWE weakness categories most often found in tor browser CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many tor browser CVEs were published each year.

2018

2019

2021

Other Tor products

Browse vulnerabilities for other products by Tor.

tor112 CVEs

All Tor vulnerabilities

Frequently asked questions

Common questions about tor browser vulnerabilities.

How many CVEs does Tor tor browser have?: Tor tor browser has 5 published CVE records since 2018.
How many Tor tor browser CVEs are in CISA KEV?: None of Tor tor browser's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tor tor browser vulnerabilities?: Yes — 4 of Tor tor browser's CVEs have a known public exploit.
Which versions of Tor tor browser are affected?: 8 distinct Tor tor browser versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tor tor browser CVEs?: Tor tor browser's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-203 (Observable Discrepancy), CWE-532 (Insertion of Sensitive Information into Log File).
How many critical Tor tor browser vulnerabilities are there?: Tor tor browser has 1 critical and 0 high-severity CVEs.
What is the average severity of Tor tor browser CVEs?: The average CVSS base score across Tor tor browser's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track tor browser vulnerabilities

Get an alert for each new tor browser CVE, with AI-written analysis and remediation steps.

Create an account See pricing