CVE-2019-12383

CVE-2019-12383 affects Tor Browser prior to 8.0.1, exposing the browser UI locale by measuring a button width even when users enable “Don’t send my language.” Root cause: information exposure via UI rendering measurements; impact: potential disclosure of user language settings. The connected docu...

CVE-2017-16639

CVE-2017-16639 affects Tor Browser on Windows prior to 8.0. The issue allows remote attackers to bypass the intended anonymity feature and reveal the client IP address. User interaction is required to trigger this vulnerability. The available connected sources identify the vulnerability and its i...