Wireshark Foundation Wireshark vulnerabilities
185 known vulnerabilities affecting wireshark_foundation/wireshark.
Total CVEs
185
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH68MEDIUM114LOW1
Vulnerabilities
Page 6 of 10
CVE-2026-76887P4MEDIUMCVSS 6.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76887 [MEDIUM] CWE-122 CVE-2026-76887: Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of serv
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-96423P4HIGHCVSS 7.1≥ 4.6.0, < 4.6.9≥ 4.4.0, < 4.4.192026-09-29
CVE-2026-96423 [HIGH] CWE-122 CVE-2026-96423: X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-6525P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.52026-05-02
CVE-2026-6525 [MEDIUM] CWE-476 CVE-2026-6525: IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4
nvd
CVE-2021-4183P4MEDIUMCVSS 5.5v=3.6.02021-12-30
CVE-2021-4183 [MEDIUM] CWE-125 CVE-2021-4183: Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
nvd
CVE-2024-8250P4MEDIUMCVSS 5.5≥ 4.2.0, < 4.2.7≥ 4.0.0, < 4.0.172024-08-29
CVE-2024-8250 [MEDIUM] CWE-825 CVE-2024-8250: NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
nvd
CVE-2024-11596P4MEDIUMCVSS 5.5≥ 4.4.0, < 4.4.2≥ 4.2.0, < 4.2.92024-11-21
CVE-2024-11596 [MEDIUM] CWE-126 CVE-2024-11596: ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via pac
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
nvd
CVE-2026-15167P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.7≥ 4.4.0, < 4.4.172026-07-08
CVE-2026-15167 [MEDIUM] CWE-121 CVE-2026-15167: DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of se
DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
nvd
CVE-2026-95386P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.92026-09-29
CVE-2026-95386 [MEDIUM] CWE-835 CVE-2026-95386: TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
nvd
CVE-2024-9780P4MEDIUMCVSS 5.5≥ 4.4.0, < 4.4.12024-10-10
CVE-2024-9780 [MEDIUM] CWE-456 CVE-2024-9780: ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capt
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
nvd
CVE-2026-6531P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6531 [MEDIUM] CWE-835 CVE-2026-6531: SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial
SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-6536P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.52026-04-30
CVE-2026-6536 [MEDIUM] CWE-835 CVE-2026-6536: DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4
DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4
nvd
CVE-2026-6534P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6534 [MEDIUM] CWE-835 CVE-2026-6534: USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows deni
USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-6521P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6521 [MEDIUM] CWE-835 CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows
OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-15170P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.7≥ 4.4.0, < 4.4.172026-07-08
CVE-2026-15170 [MEDIUM] CWE-122 CVE-2026-15170: Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of ser
Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
nvd
CVE-2026-15171P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.7≥ 4.4.0, < 4.4.172026-07-08
CVE-2026-15171 [MEDIUM] CWE-476 CVE-2026-15171: SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of servic
SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
nvd
CVE-2026-15166P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.7≥ 4.4.0, < 4.4.172026-07-08
CVE-2026-15166 [MEDIUM] CWE-121 CVE-2026-15166: IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial o
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
nvd
CVE-2026-96416P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.9≥ 4.4.0, < 4.4.192026-09-29
CVE-2026-96416 [MEDIUM] CWE-122 CVE-2026-96416: IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-96418P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.9≥ 4.4.0, < 4.4.192026-09-29
CVE-2026-96418 [MEDIUM] CWE-835 CVE-2026-96418: TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-6522P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6522 [MEDIUM] CWE-835 CVE-2026-6522: RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows
RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2024-11595P4MEDIUMCVSS 5.5≥ 4.4.0, < 4.4.2≥ 4.2.0, < 4.2.92024-11-21
CVE-2024-11595 [MEDIUM] CWE-835 CVE-2024-11595: FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of s
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
nvd