CVE-2021-46702

MEDIUM Year: 2021
CVSS v3 Score
5.5
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-404
View all →

Vulnerability Description

Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.

Related Vulnerabilities

CVE-2010-10001

MEDIUM
CVSS:5.5(Medium)

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 10...

CWE-4042010

CVE-2015-10002

MEDIUM
CVSS:5.5(Medium)

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is rec...

CWE-4042015

CVE-2016-15024

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. ...

CWE-4042016

CVE-2017-0733

MEDIUM
CVSS:5.5(Medium)

A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487.

CWE-4042017

CVE-2017-20011

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an un...

CWE-4042017

CVE-2017-20012

MEDIUM
CVSS:5.5(Medium)

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be a...

CWE-4042017