一、 漏洞 CVE-2021-46702 基础信息
漏洞标题
N/A
来源：AIGC 神龙大模型
漏洞描述信息
在Windows 10 Build 10586上运行的Tor浏览器9.0.7存在信息泄露风险。这可能导致本地攻击者绕过预期匿名功能，获取有关本地用户访问的洋葱服务的信息。通过分析内存即使在本地用户使用产品后的几小时之后也可以实现此目标。这是因为该产品未正确释放内存。
来源：AIGC 神龙大模型
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
来源：AIGC 神龙大模型
漏洞类别
N/A
来源：AIGC 神龙大模型
漏洞标题
N/A
来源：美国国家漏洞数据库 NVD
漏洞描述信息
Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.
来源：美国国家漏洞数据库 NVD
CVSS信息
N/A
来源：美国国家漏洞数据库 NVD
漏洞类别
N/A
来源：美国国家漏洞数据库 NVD
漏洞标题
Tor Browser 安全漏洞
来源：中国国家信息安全漏洞库 CNNVD
漏洞描述信息
Tor Browser是一款用于匿名访问互联网的浏览器。 Tor Browser 存在安全漏洞，该漏洞可以让本地攻击者可利用该漏洞绕过预期的匿名特性，并获得有关本地用户访问的洋葱服务的信息。这可以通过在本地用户使用产品几个小时后分析RAM内存来完成。这是因为产品没有正确释放内存。
来源：中国国家信息安全漏洞库 CNNVD
CVSS信息
N/A
来源：中国国家信息安全漏洞库 CNNVD
漏洞类别
其他
来源：中国国家信息安全漏洞库 CNNVD
二、漏洞 CVE-2021-46702 的公开POC
# POC 描述 源链接 神龙链接
1 Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory. https://github.com/malakkf/CVE-2021-46702 POC详情
2 Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory. https://github.com/Exmak-s/CVE-2021-46702 POC详情
三、漏洞 CVE-2021-46702 的情报信息