Wireshark vulnerabilities
Published CVEs affecting Wireshark products: 114 record(s), with severity, exploitation and fixes.
CVE-2026-96423
High · 7.1
CWE-125 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96422
Medium · 5.5
CWE-617 Sep 29, 2026
Reachable Assertion in Wireshark
Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96421
Medium · 5.5
CWE-1325 Sep 29, 2026
Improperly Controlled Sequential Memory Allocation in Wireshark
USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96420
Medium · 5.5
CWE-126 Sep 29, 2026
Buffer Over-read in Wireshark
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96419
High · 7.8
CWE-22 Sep 29, 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution
CVE-2026-96418
Medium · 5.5
CWE-835 Sep 29, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96417
Medium · 5.5
CWE-122 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96416
Medium · 5.5
CWE-122 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-96415
Medium · 5.5
CWE-121 Sep 29, 2026
Stack-based Buffer Overflow in Wireshark
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95395
Medium · 5.5
CWE-401 Sep 29, 2026
Missing Release of Memory after Effective Lifetime in Wireshark
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95394
Medium · 4.7
CWE-606 Sep 29, 2026
Unchecked Input for Loop Condition in Wireshark
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95393
Medium · 4.7
CWE-122 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95392
Medium · 5.5
CWE-126 Sep 29, 2026
Buffer Over-read in Wireshark
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95391
Medium · 5.5
CWE-416 Sep 29, 2026
Use After Free in Wireshark
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
CVE-2026-95390
Medium · 5.5
CWE-476 Sep 29, 2026
NULL Pointer Dereference in Wireshark
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
CVE-2026-95389
High · 8.1
CWE-122 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95388
Medium · 5.5
CWE-122 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95387
High · 8.8
CWE-122 Sep 29, 2026
Heap-based Buffer Overflow in Wireshark
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-95386
Medium · 5.5
CWE-835 Sep 29, 2026
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
CVE-2026-76929
Medium · 5.5
CWE-125 Aug 19, 2026
Out-of-bounds Read in Wireshark
Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76928
High · 7.5
CWE-476 Aug 19, 2026
NULL Pointer Dereference in Wireshark
X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76927
High · 7.5
CWE-476 Aug 19, 2026
NULL Pointer Dereference in Wireshark
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76926
Medium · 6.5
CWE-617 Aug 19, 2026
BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial…
BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76924
Medium · 5.5
CWE-125 Aug 19, 2026
Out-of-bounds Read in Wireshark
Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76923
Medium · 5.5
CWE-125 Aug 19, 2026
Out-of-bounds Read in Wireshark
Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service