CVE-2026-44603

Low

Published: 07 May 2026

Published

07 May 2026

Modified

07 May 2026

KEV Added

—

Patch

—

CVSS Score 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Score 0.0004 13.3th percentile

Risk Priority 7 60% EPSS · 20% KEV · 20% CVSS

Description

Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.

Security SummaryAI

Automated synthesis unavailable for this CVE.

torproject

tor

≤ 0.4.9.7