Linux TBB SFTP URI allows local IP disclosure Analysed #253429 Valid Information Disclosure Critical 2017-10-25 $3,000 71 Scrollbar Width permits detecting browser platform Analysed #252580 Valid Information Disclosure Low 2017-10-20 – 29 Access to local file system using javascript #258630 Valid Misconfiguration and Insecure Design High 2017-11-18 – 15 [Android org.torproject.android] Possible to force list of bridges #252626 Informative Access Control High 2017-08-21 – 13 16 instances where return value of OpenSSL i2d_RSAPublicKey is discarded -- might lead to use of uninitialized memory #142773 Valid Information Disclosure – 2017-11-26 – 11 languagechange event fires simultaneously on all tabs #257942 Valid Information Disclosure Low 2017-10-19 $100 10 Simple CSS line-height identifies platform #256647 Valid Information Disclosure Low 2017-10-20 – 10 Use-after-free during XML transformations (MFSA-2016-27) #126797 Informative Memory Corruption – 2017-10-21 $300 10 [tor] pre-emptive defenses, potential vulnerabilities #115686 Valid Misconfiguration and Insecure Design – 2017-11-26 – 8 [tor] libevent dns OOB read #115702 Valid Memory Corruption – 2017-10-19 – 7 [tor] control connection pre-auth DoS (infinite loop) with --enable-bufferevents #113424 Valid Denial of Service – 2017-10-19 – 7 potential memory corruption in or/buffers.c (particularly on 32 bit) #163459 Valid Memory Corruption – 2017-10-19 – 6 Heap corruption via memarea.c #138025 Valid Memory Corruption – 2017-10-19 – 6 Overreads/overcopies in torsocks #126598 Valid Memory Corruption – 2017-10-19 – 6 libevent (stack) buffer overflow in evutil_parse_sockaddr_port #112784 Valid Memory Corruption – 2017-10-19 – 6 [tor] libevent dns remote stack overread vulnerability #112632 Valid Memory Corruption – 2017-10-19 – 6 smartlist_add, smartlist_insert (may) cause heap corruption as a result of inadequate checks in smartlist_ensure_capacity #112386 Valid Memory Corruption – 2017-10-19 – 6 Preferred language option fingerprinting issue in Tor Browser #281597 Informative Information Disclosure Low 2017-10-24 – 3 Use of uninitialized value in networkstatus_parse_vote_from_string (src/or/routerparse.c:3533) #276253 Informative Memory Corruption None 2017-10-31 – 2 Enforce minimum master password complexity #280282 N/A Authentication Medium 2017-10-19 – 1 Use of uninitialized value in memarea_strdup (src/common/memarea.c:369) #274997 Informative Memory Corruption – 2017-10-25 – 1 Uncloaking hidden services and hidden service users #268113 Informative Cryptography – 2017-10-20 – 1 Stack overflow in UnbindFromTree (browser can be crashed remotely) #264481 Informative Memory Corruption High 2017-10-02 – 1 Cross-domain linkability when system time changed in Tor Browser #282339 Informative Information Disclosure Low 2017-10-26 – – Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy #281682 Informative Memory Corruption Medium 2017-10-24 – – Sql query disclosure, #267922 Informative Information Disclosure Low 2017-09-18 – –