Tor — Vulnerabilities & Security Advisories 21

This page aggregates Common Weakness Enumeration (CWE) and Common Vulnerabilities and Exposures (CVE) entries specifically related to the Tor anonymity network software developed by The Tor Project. It serves as a centralized resource for security researchers, developers, and users interested in the historical and current security posture of this widely used privacy tool. The collection encompasses a broad spectrum of vulnerability types, ranging from remote code execution and information disclosure to denial of service and configuration errors. This dataset covers known security issues reported from the inception of the Tor Project through to the most recent disclosures, providing a comprehensive historical view of the software's exposure to security threats. By consulting this aggregation, users can track the evolution of advisory notices issued by The Tor Project and other relevant security entities. It allows for a deeper understanding of specific weakness classes that frequently impact Tor, helping to contextualize how certain attack vectors are exploited in real-world scenarios. Additionally, individuals can look up the complete vulnerability history of specific Tor releases to assess the impact of past bugs on their current infrastructure. This resource is designed to facilitate transparent security analysis and informed decision-making regarding the deployment and configuration of Tor clients and relays. It does not provide remediation advice but rather documents the landscape of known flaws to support auditing, reporting, and educational efforts within the privacy and security communities.