Wireshark Foundation Wireshark vulnerabilities
185 known vulnerabilities affecting wireshark_foundation/wireshark.
Total CVEs
185
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH68MEDIUM114LOW1
Vulnerabilities
Page 8 of 10
CVE-2026-76918P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76918 [MEDIUM] CWE-122 CVE-2026-76918: SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-15174P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.7≥ 4.4.0, < 4.4.172026-07-08
CVE-2026-15174 [MEDIUM] CWE-122 CVE-2026-15174: Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows den
Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
nvd
CVE-2025-13499P4MEDIUMCVSS 5.5v4.6.0≥ 4.4.0, < 4.4.112025-11-21
CVE-2025-13499 [MEDIUM] CWE-824 CVE-2025-13499: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service
Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service
nvd
CVE-2026-6869P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6869 [MEDIUM] CWE-1325 CVE-2026-6869: WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of
WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-6527P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6527 [MEDIUM] CWE-674 CVE-2026-6527: ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of
ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-6523P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6523 [MEDIUM] CWE-835 CVE-2026-6523: GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial o
GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-6524P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6524 [MEDIUM] CWE-824 CVE-2026-6524: MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serv
MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-6867P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-6867 [MEDIUM] CWE-1325 CVE-2026-6867: SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of servi
SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-5299P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-5299 [MEDIUM] CWE-674 CVE-2026-5299: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of
ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-5401P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.5≥ 4.4.0, < 4.4.152026-04-30
CVE-2026-5401 [MEDIUM] CWE-674 CVE-2026-5401: AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial
AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
nvd
CVE-2026-95390P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.92026-09-29
CVE-2026-95390 [MEDIUM] CWE-476 CVE-2026-95390: PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
nvd
CVE-2023-3648P4MEDIUMCVSS 5.5≥ 4.0.0, < 4.0.7≥ 3.6.0, < 3.6.152023-07-14
CVE-2023-3648 [MEDIUM] CWE-762 CVE-2023-3648: Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via p
Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file
nvd
CVE-2024-8645P4MEDIUMCVSS 5.5≥ 4.2.0, < 4.2.6≥ 4.0.0, < 4.0.162024-09-10
CVE-2024-8645 [MEDIUM] CWE-824 CVE-2024-8645: SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via pa
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
nvd
CVE-2026-95392P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.9≥ 4.4.0, < 4.4.192026-09-29
CVE-2026-95392 [MEDIUM] CWE-126 CVE-2026-95392: MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-76921P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76921 [MEDIUM] CWE-416 CVE-2026-76921: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-0960P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.32026-01-14
CVE-2026-0960 [MEDIUM] CWE-835 CVE-2026-0960: HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service
HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service
nvd
CVE-2026-96417P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.9≥ 4.4.0, < 4.4.192026-09-29
CVE-2026-96417 [MEDIUM] CWE-122 CVE-2026-96417: RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-76924P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76924 [MEDIUM] CWE-125 CVE-2026-76924: Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-76881P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.8≥ 4.4.0, < 4.4.182026-08-19
CVE-2026-76881 [MEDIUM] CWE-476 CVE-2026-76881: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
nvd
CVE-2026-95388P4MEDIUMCVSS 5.5≥ 4.6.0, < 4.6.9≥ 4.4.0, < 4.4.192026-09-29
CVE-2026-95388 [MEDIUM] CWE-122 CVE-2026-95388: Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
nvd