Tor Browser before 8.0.1 has an information exposure vulnerability
published May 28, 2019
CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is
Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02164 · 82.1th percentile
Published
2019-05-28T02:21Z
EPSS history
Timeline
28 MAY 02:21Z
Tor Browser before 8.0.1 has an information exposure vulnerability