← Back

CVE-2026-44601

nvd nist
Published: May 7, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

Affected (1)

Products: Torproject: Tor
Torproject
1 product
Tor
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Tor
Before 0.4.9.7

Related CWEs

CWE-837
Improper Enforcement of a Single, Unique Action
The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or improperly enforces this restriction.

References (4)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
Mailing ListRelease Notes

Timeline

No history available yet.