CVE-2026-44600

LOW

Tor Conflux Out-of-Order Queue Clearing Incorrect Behavior Order

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2026-44600 has a selected CVSS score of 3.7 (low).

Description

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 7, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Tor

Browse torproject / Tor

Default status: unaffected

CVE ListBefore 0.4.9.7affected

References

5