Wireshark vulnerabilities
Published CVEs affecting Wireshark products: 114 record(s), with severity, exploitation and fixes.
CVE-2026-76922
Medium · 5.5
CWE-476 Aug 19, 2026
NULL Pointer Dereference in Wireshark
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76921
Medium · 5.5
CWE-416 Aug 19, 2026
Use After Free in Wireshark
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76920
Medium · 5.5
CWE-787 Aug 19, 2026
Out-of-bounds Write in Wireshark
3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76919
High · 7.5
CWE-457 Aug 19, 2026
Use of Uninitialized Variable in Wireshark
ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76918
Medium · 5.5
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76917
Medium · 5.5
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76891
Medium · 6.5
CWE-825 Aug 19, 2026
Expired Pointer Dereference in Wireshark
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76890
Medium · 6.5
CWE-825 Aug 19, 2026
Expired Pointer Dereference in Wireshark
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76889
Medium · 5.5
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76888
High · 7.5
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76887
Medium · 6.5
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76886
Critical · 9.8
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76885
Medium · 6.5
CWE-126 Aug 19, 2026
Buffer Over-read in Wireshark
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76884
Medium · 6.5
CWE-126 Aug 19, 2026
Buffer Over-read in Wireshark
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76883
Medium · 5.5
CWE-122 Aug 19, 2026
Heap-based Buffer Overflow in Wireshark
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76882
Medium · 5.5
CWE-125 Aug 19, 2026
Out-of-bounds Read in Wireshark
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76881
Medium · 5.5
CWE-476 Aug 19, 2026
NULL Pointer Dereference in Wireshark
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76880
High · 7.5
CWE-787 Aug 19, 2026
Out-of-bounds Write in Wireshark
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76879
High · 7.5
CWE-121 Aug 19, 2026
Stack-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-19696
Medium · 5.5
CWE-787 Aug 13, 2026
Out-of-bounds Write in Wireshark
Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows
CVE-2026-19695
Medium · 5.5
CWE-121 Aug 13, 2026
Stack-based Buffer Overflow in Wireshark
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
CVE-2026-19694
Medium · 5.5
CWE-122 Aug 13, 2026
Heap-based Buffer Overflow in Wireshark
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
CVE-2026-15168
Low · 3.3
CWE-457 Jul 8, 2026
Use of Uninitialized Variable in Wireshark
BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure
CVE-2026-15174
Medium · 5.5
CWE-122 Jul 8, 2026
Heap-based Buffer Overflow in Wireshark
Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
CVE-2026-15173
Medium · 5.5
CWE-122 Jul 8, 2026
Heap-based Buffer Overflow in Wireshark
pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service