CVE-2017-16639

MEDIUM 4.3CVE-2017-16639 · Published 14/09/2018 · updated 17/06/2026

In short

CVE-2017-16639 is a MEDIUM (CVSS 4.3) vulnerability affecting tor browser (torproject).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.7% of all vulnerabilities.
Fix: update to 8.0 or later.

Package	Affected versions	Patched versions
tor browser torproject	`< 8.0`	`8.0`

Description

Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.

References

packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.html · Exploit
securityfocus.com/bid/105346 · Third Party Advisory
seclists.org/bugtraq/2018/Sep/29 · Exploit
wearesegment.com/research/tor-browser-deanonymization-with-smb · Exploit

More vulnerabilities in tor browser

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tor browser

torproject

< 8.0

8.0

More vulnerabilities in tor browser

See all →