This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user.

Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287 Local privilege escalation due to excessive permissions assigned to child processes. As a workaround, specify one's own `java.io.tmpdir` when starting the JVM or use tBaseDir(.) to set the directory to something that is only readable by the current user. Version 4.1.77.Final contains a patch for this vulnerability. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users. This only impacts applications running on Java version 6 and lower. When Netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled.

The package `io.netty:netty-codec-http` prior to version 4.1.77.Final contains an insufficient fix for CVE-2021-21290. Netty is an open-source, asynchronous event-driven network application framework.

Hp print and scan doctor 5.0.11