CVE-2017-16541 in Browser
Summary
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.