Wireshark (Wireshark Foundation) - vulnerabilities (CVEs)

185 CVEs, 19 in the last 30 days, 3 known versions, newest CVE from 2026-09-29. Vendor: Wireshark Foundation.

CVEs of Wireshark

• CVE-2026-95391 - CVSS 5.5 (medium), 2026-09-29: ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
• CVE-2026-95389 - CVSS 8.1 (high), 2026-09-29: SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-95386 - CVSS 5.5 (medium), 2026-09-29: TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
• CVE-2026-95390 - CVSS 5.5 (medium), 2026-09-29: PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
• CVE-2026-95395 - CVSS 5.5 (medium), 2026-09-29: IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-95387 - CVSS 8.8 (high), 2026-09-29: SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-95394 - CVSS 4.7 (medium), 2026-09-29: Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-95393 - CVSS 4.7 (medium), 2026-09-29: CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-95392 - CVSS 5.5 (medium), 2026-09-29: MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-95388 - CVSS 5.5 (medium), 2026-09-29: Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96422 - CVSS 5.5 (medium), 2026-09-29: Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96421 - CVSS 5.5 (medium), 2026-09-29: USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96417 - CVSS 5.5 (medium), 2026-09-29: RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96418 - CVSS 5.5 (medium), 2026-09-29: TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96419 - CVSS 7.8 (high), 2026-09-29: Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution
• CVE-2026-96420 - CVSS 5.5 (medium), 2026-09-29: Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96423 - CVSS 7.1 (high), 2026-09-29: X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96416 - CVSS 5.5 (medium), 2026-09-29: IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-96415 - CVSS 5.5 (medium), 2026-09-29: Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76929 - CVSS 5.5 (medium), 2026-08-19: Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76928 - CVSS 7.5 (high), 2026-08-19: X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76927 - CVSS 7.5 (high), 2026-08-19: H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76926 - CVSS 6.5 (medium), 2026-08-19: BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76891 - CVSS 6.5 (medium), 2026-08-19: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76890 - CVSS 6.5 (medium), 2026-08-19: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76885 - CVSS 6.5 (medium), 2026-08-19: Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76924 - CVSS 5.5 (medium), 2026-08-19: Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76923 - CVSS 5.5 (medium), 2026-08-19: Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76922 - CVSS 5.5 (medium), 2026-08-19: Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76921 - CVSS 5.5 (medium), 2026-08-19: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76920 - CVSS 5.5 (medium), 2026-08-19: 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76919 - CVSS 7.5 (high), 2026-08-19: ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76918 - CVSS 5.5 (medium), 2026-08-19: SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76917 - CVSS 5.5 (medium), 2026-08-19: Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76880 - CVSS 7.5 (high), 2026-08-19: RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76879 - CVSS 7.5 (high), 2026-08-19: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76889 - CVSS 5.5 (medium), 2026-08-19: UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76888 - CVSS 7.5 (high), 2026-08-19: RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76887 - CVSS 6.5 (medium), 2026-08-19: Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76886 - CVSS 9.8 (critical), 2026-08-19: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76884 - CVSS 6.5 (medium), 2026-08-19: ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76883 - CVSS 5.5 (medium), 2026-08-19: Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76882 - CVSS 5.5 (medium), 2026-08-19: Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-76881 - CVSS 5.5 (medium), 2026-08-19: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
• CVE-2026-19694 - CVSS 5.5 (medium), 2026-08-13: TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
• CVE-2026-19695 - CVSS 5.5 (medium), 2026-08-13: Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
• CVE-2026-19696 - CVSS 6.6 (medium), 2026-08-13: Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows
• CVE-2026-15168 - CVSS 3.3 (low), 2026-07-08: BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure
• CVE-2026-15166 - CVSS 5.5 (medium), 2026-07-08: IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15174 - CVSS 5.5 (medium), 2026-07-08: Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15172 - CVSS 5.5 (medium), 2026-07-08: FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15173 - CVSS 5.5 (medium), 2026-07-08: pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service
• CVE-2026-15171 - CVSS 5.5 (medium), 2026-07-08: SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15169 - CVSS 7.5 (high), 2026-07-08: UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15167 - CVSS 7.5 (high), 2026-07-08: DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15170 - CVSS 5.5 (medium), 2026-07-08: Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
• CVE-2026-15165 - CVSS 5.5 (medium), 2026-07-08: TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service
• CVE-2026-15163 - CVSS 7.5 (high), 2026-07-08: Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service
• CVE-2026-9759 - CVSS 5.5 (medium), 2026-05-27: ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service
• CVE-2026-6525 - CVSS 5.5 (medium), 2026-05-02: IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4
• CVE-2026-5656 - CVSS 7.8 (high), 2026-05-01: Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
• CVE-2026-5404 - CVSS 5.5 (medium), 2026-05-01: K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5403 - CVSS 7.8 (high), 2026-05-01: SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
• CVE-2026-5405 - CVSS 7.8 (high), 2026-05-01: RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
• CVE-2026-6537 - CVSS 5.5 (medium), 2026-04-30: ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6869 - CVSS 5.5 (medium), 2026-04-30: WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6867 - CVSS 5.5 (medium), 2026-04-30: SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6538 - CVSS 5.5 (medium), 2026-04-30: BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6870 - CVSS 5.5 (medium), 2026-04-30: GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6531 - CVSS 5.5 (medium), 2026-04-30: SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6534 - CVSS 5.5 (medium), 2026-04-30: USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6530 - CVSS 5.5 (medium), 2026-04-30: DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6533 - CVSS 5.5 (medium), 2026-04-30: Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6536 - CVSS 5.5 (medium), 2026-04-30: DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4
• CVE-2026-6529 - CVSS 5.5 (medium), 2026-04-30: iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6532 - CVSS 5.5 (medium), 2026-04-30: Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6535 - CVSS 5.5 (medium), 2026-04-30: Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6528 - CVSS 5.5 (medium), 2026-04-30: TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service
• CVE-2026-6520 - CVSS 7.5 (high), 2026-04-30: OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6523 - CVSS 5.5 (medium), 2026-04-30: GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6527 - CVSS 5.5 (medium), 2026-04-30: ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6519 - CVSS 7.5 (high), 2026-04-30: MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6522 - CVSS 5.5 (medium), 2026-04-30: RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6526 - CVSS 5.5 (medium), 2026-04-30: RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4
• CVE-2026-6521 - CVSS 5.5 (medium), 2026-04-30: OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-6524 - CVSS 5.5 (medium), 2026-04-30: MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5409 - CVSS 5.5 (medium), 2026-04-30: Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5655 - CVSS 7.5 (high), 2026-04-30: SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service
• CVE-2026-5408 - CVSS 5.5 (medium), 2026-04-30: BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5654 - CVSS 7.5 (high), 2026-04-30: AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5407 - CVSS 5.5 (medium), 2026-04-30: SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5653 - CVSS 7.5 (high), 2026-04-30: DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5657 - CVSS 7.5 (high), 2026-04-30: iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5402 - CVSS 8.8 (high), 2026-04-30: TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution
• CVE-2026-5401 - CVSS 5.5 (medium), 2026-04-30: AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5299 - CVSS 5.5 (medium), 2026-04-30: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-5406 - CVSS 5.5 (medium), 2026-04-30: FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-7379 - CVSS 7.5 (high), 2026-04-30: Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-7378 - CVSS 7.5 (high), 2026-04-30: Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
• CVE-2026-7376 - CVSS 7.5 (high), 2026-04-30: Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service