CVE-2021-46702

Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.

• CWE-404

• https://www.sciencedirect.com/science/article/pii/S0167404821001358Technical Description, Third Party Advisory
• https://www.sciencedirect.com/science/article/pii/S0167404821001358Technical Description, Third Party Advisory

Published

Feb 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46681A XSS vulnerability exist in Pandora FMS version 756 and bel…6.1
• CVE-2021-46686Improper neutralization of special elements used in an OS co…9.8
• CVE-2021-46687JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vu…4.9
• CVE-2021-46699A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2021-46700In libsixel 1.8.6, sixel_encoder_output_without_macro (calle…6.5
• CVE-2021-46701PreMiD 2.2.0 allows unintended access via the websocket tran…6.5
• CVE-2021-46703In the IsolatedRazorEngine component of Antaris RazorEngine …9.8
• CVE-2021-46704In GenieACS 1.2.x before 1.2.8, the UI interface API is vuln…9.8
• CVE-2021-46705A Insecure Temporary File vulnerability in grub-once of grub…4.4
• CVE-2021-46708The swagger-ui-dist package before 4.1.3 for Node.js could a…6.1
• CVE-2021-46709phpLiteAdmin through 1.9.8.2 allows XSS via the index.php ne…6.1
• CVE-2021-46740The device authentication service module has a defect vulner…7.5