CVE-2022-33903: Torproject Tor

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.

Affected products

• Torproject Tor: from 0.4.7.1, before 0.4.7.8 (fixed in 0.4.7.8)

Published 2022-07-17. Last modified 2026-06-17.