CVE-2021-46702

Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure

published February 26, 2022

CVSS
—
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.2th percentile
Published
2022-02-26T02:56Z
EPSS history
Timeline
  • 26 FEB 02:56Z
    Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure
    cvelistv5