Sql query disclosure, #267922 Informative Information Disclosure – 2017-09-18 – – Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy #281682 Informative Memory Corruption – 2017-10-24 – – Cross-domain linkability when system time changed in Tor Browser #282339 Informative Information Disclosure – 2017-10-26 – – Tor Browser: iframe with `data:` uri has access to parent window #358005 Informative No weakness recorded – 2018-06-06 – – Stack overflow in UnbindFromTree (browser can be crashed remotely) #264481 Informative Memory Corruption – 2017-10-02 – 1 Uncloaking hidden services and hidden service users #268113 Informative Cryptography – 2017-10-20 – 1 Use of uninitialized value in memarea_strdup (src/common/memarea.c:369) #274997 Informative Memory Corruption – 2017-10-25 – 1 Enforce minimum master password complexity #280282 N/A Authentication – 2017-10-19 – 1 Use of uninitialized value in networkstatus_parse_vote_from_string (src/or/routerparse.c:3533) #276253 Informative Memory Corruption – 2017-10-31 – 2 Use of unitialized value in token_check_object (src/or/parsecommon.c:224) #276255 Duplicate Memory Corruption – 2019-10-04 – 3 Preferred language option fingerprinting issue in Tor Browser #281597 Informative Information Disclosure – 2017-10-24 – 3 Email Spoofing Possible on torproject.org Email Domain #423336 N/A Input Validation and Logic – 2018-10-16 – 3 Information Exposure Through Directory Listing #1316412 N/A Information Disclosure – 2021-08-27 – 3 Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains. #1250273 Informative Information Disclosure – 2021-09-27 – 4 Tor Project - Full Path Disclosure #269426 Informative Information Disclosure – 2023-11-28 – 5 https://get.ooni.torproject.org/ #274285 N/A No weakness recorded – 2023-11-28 – 5 smartlist_add, smartlist_insert (may) cause heap corruption as a result of inadequate checks in smartlist_ensure_capacity #112386 Valid Memory Corruption – 2017-10-19 – 6 [tor] libevent dns remote stack overread vulnerability #112632 Valid Memory Corruption – 2017-10-19 – 6 libevent (stack) buffer overflow in evutil_parse_sockaddr_port #112784 Valid Memory Corruption – 2017-10-19 – 6 Overreads/overcopies in torsocks #126598 Valid Memory Corruption – 2017-10-19 – 6 Heap corruption via memarea.c #138025 Valid Memory Corruption – 2017-10-19 – 6 potential memory corruption in or/buffers.c (particularly on 32 bit) #163459 Valid Memory Corruption – 2017-10-19 – 6 Content spoofing on #273819 Informative Misconfiguration and Insecure Design – 2023-11-28 – 6 [tor] control connection pre-auth DoS (infinite loop) with --enable-bufferevents #113424 Valid Denial of Service – 2017-10-19 – 7 [tor] libevent dns OOB read #115702 Valid Memory Corruption – 2017-10-19 – 7 Expose relay IP in the debug (The source is different from the rendering) #330721 Informative No weakness recorded – 2018-07-21 – 7 [tor] pre-emptive defenses, potential vulnerabilities #115686 Valid Misconfiguration and Insecure Design – 2017-11-26 – 8 [rt.torproject.org] No Rate Limitting on Login Form #265706 Informative Authentication – 2023-11-28 – 9 solving TOR vulnerability, in other to make bruteforce difficult #268320 Informative Memory Corruption – 2023-11-28 – 9 Report Regarding Security Vulnerability #269243 Informative No weakness recorded – 2023-11-28 – 9 Use-after-free during XML transformations (MFSA-2016-27) #126797 Informative Memory Corruption – 2017-10-21 $300 10 Simple CSS line-height identifies platform #256647 Valid Information Disclosure – 2017-10-20 – 10 languagechange event fires simultaneously on all tabs #257942 Valid Information Disclosure – 2017-10-19 $100 10 16 instances where return value of OpenSSL i2d_RSAPublicKey is discarded -- might lead to use of uninitialized memory #142773 Valid Information Disclosure – 2017-11-26 – 11 Multiple Path Transversal Vulnerabilites #273377 N/A File and Path Handling – 2023-11-28 – 11 Use of unitialized value in crypto_pk_num_bits (src/common/crypto.c:971) #274998 Informative Memory Corruption – 2023-11-28 – 11 Expose user IP if TOR crashs #410087 Informative No weakness recorded – 2018-09-21 – 11 Detect Tor Browser's language #588239 Valid Information Disclosure – 2019-05-29 – 11 [Android org.torproject.android] Possible to force list of bridges #252626 Informative Access Control – 2017-08-21 – 13 Zip bomb #263663 Informative Memory Corruption – 2023-11-28 – 14 Address Bar Spoofing on TOR Browser #275960 Informative Input Validation and Logic – 2023-01-02 – 14 Access to local file system using javascript #258630 Valid Misconfiguration and Insecure Design – 2017-11-18 – 15 De-anonymization by visiting specially crafted bookmark. #294364 Valid Information Disclosure – 2018-07-03 – 15 SQL Injection in parameter REPORT #269347 Informative SQL Injection – 2023-11-28 – 23 Potential IP revealing using UNC Path in Windows File Picker #376004 Informative Information Disclosure – 2023-11-28 – 25 Tor onion service INTRODUCE2 invalid-MAC cells permanently grow service replay cache #3709703 Valid Denial of Service Low 2026-09-10 – 28 Scrollbar Width permits detecting browser platform #252580 Valid Information Disclosure – 2017-10-20 – 29 Snowflake server: Leak of TLS packets from other clients #1880610 Valid Information Disclosure – 2023-03-15 – 30 Conflux-queued zero-length RELAY_END triggers heap out-of-bounds read #3709605 Valid Memory Corruption Medium 2026-09-10 – 33 Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After Teardown #3701692 Valid Denial of Service Low 2026-06-16 $100 35