Wireshark Foundation

Records795All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high265CVSS 7.0–8.9

Exploited now

Wireshark Foundation records in CISA KEV

No Wireshark Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wireshark 795 records HIGH

Records

795 records

TI-2026-53718 CVE-2026-76886 · GHSA-wrhv-64xq-9g54

Heap-based Buffer Overflow in Wireshark

HIGH 76

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00382 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-122

TI-2026-63612 CVE-2026-95387 · GHSA-v28h-8438-ghj5

Heap-based Buffer Overflow in Wireshark

HIGH 73

SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122

TI-2024-16149 CVE-2024-24476 · GHSA-w4cp-wh3g-wgvx

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of…

HIGH 72

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01296 Published 2024-02-21 Will not fix CWE-119

TI-2010-00291 CVE-2010-0304 · GHSA-jpr3-gg36-wv7f

Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and…

HIGH 71

Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stac…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.7408 Published 2010-02-03 Fixed CWE-119

TI-2026-63614 CVE-2026-95389 · GHSA-7xm4-72f8-6hpw

Heap-based Buffer Overflow in Wireshark

HIGH 70

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00337 Published 2026-09-29 Fixed in 4.6.9, 4.4.19 CWE-122

TI-2014-01823 CVE-2014-2299 · GHSA-89xx-9cg2-c9fg

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in…

HIGH 70

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (app…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.47143 Published 2014-03-11 Fixed CWE-119

TI-2024-10743 CVE-2024-11596 · GHSA-pm69-rqj8-f5fq

Buffer Over-read in Wireshark

HIGH 69

ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00297 Published 2024-11-21 Partial fix · 4.4.2, 4.2.9 CWE-126

TI-2024-09078 CVE-2024-9781 · GHSA-752v-9q7h-jp65

Improper Handling of Missing Values in Wireshark

HIGH 69

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00313 Published 2024-10-10 Partial fix · 4.4.1, 4.2.8 CWE-230

TI-2024-09077 CVE-2024-9780 · GHSA-4rf2-7phj-4vwq

Missing Initialization of a Variable in Wireshark

HIGH 69

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00244 Published 2024-10-10 Fixed in 4.4.1 CWE-456

TI-2024-07648 CVE-2024-8250 · GHSA-4xqj-427q-hf6q

Expired Pointer Dereference in Wireshark

HIGH 69

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00317 Published 2024-08-28 Partial fix · 4.2.7, 4.0.17 CWE-825

TI-2024-00191 CVE-2024-0211 · GHSA-xf55-65pg-x58p

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

HIGH 69

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00543 Published 2024-01-03 Fixed in 4.2.1 CWE-835

TI-2024-00189 CVE-2024-0209 · GHSA-jccx-fvx2-cqjj

NULL Pointer Dereference in Wireshark

HIGH 69

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00579 Published 2024-01-03 Fixed in 4.2.1, 4.0.12 +1 CWE-476

TI-2023-05673 CVE-2023-6175 · GHSA-r8r7-4wvf-px33

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

HIGH 69

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03456 Published 2024-03-26 Partial fix · 4.0.11, 3.6.19 CWE-120

TI-2011-01410 CVE-2011-1591 · GHSA-8qjg-52x8-f83x

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in…

HIGH 68

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.41744 Published 2011-04-29 No fix listed CWE-119

TI-2026-63770 CVE-2026-96419 · GHSA-2cxv-8hv2-vxxx

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

HIGH 67

Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00186 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-22

TI-2026-53720 CVE-2026-76888 · GHSA-744r-mg5c-qh5x

Heap-based Buffer Overflow in Wireshark

HIGH 66

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00215 Published 2026-08-19 Partial fix · 4.6.8, 4.4.18 CWE-122

TI-2026-12780 CVE-2026-15169 · GHSA-9gc8-6grc-r8pc

Heap-based Buffer Overflow in Wireshark

HIGH 66

UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00272 Published 2026-07-08 Partial fix · 4.6.7, 4.4.17 CWE-122

TI-2026-06479 CVE-2026-7376 · GHSA-qjx9-wjx4-9m8j

NULL Pointer Dereference in Wireshark

HIGH 66

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00193 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-476

TI-2026-05714 CVE-2026-6519 · GHSA-7prr-p9gf-r8p8

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

HIGH 66

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00171 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-835

TI-2026-04965 CVE-2026-5657 · GHSA-wvxj-3gq6-2mg4

Double Free in Wireshark

HIGH 66

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-415

TI-2026-04963 CVE-2026-5655 · GHSA-p66g-2gm8-7hxq

Use After Free in Wireshark

HIGH 66

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5 CWE-416

TI-2026-04962 CVE-2026-5654 · GHSA-wmqv-gf9g-f856

Stack-based Buffer Overflow in Wireshark

HIGH 66

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-121

TI-2026-04961 CVE-2026-5653 · GHSA-cphh-hqjx-9g8v

Heap-based Buffer Overflow in Wireshark

HIGH 66

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00206 Published 2026-04-30 Partial fix · 4.6.5, 4.4.15 CWE-122

TI-2023-04164 CVE-2023-4512 · GHSA-g65w-25m5-5gcg

Uncontrolled Recursion in Wireshark

HIGH 66

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00514 Published 2023-08-24 Partial fix · 4.0.8 CWE-674

TI-2023-02698 CVE-2023-2879 · GHSA-pp5p-jjp7-mh7c

Infinite loop in Wireshark

HIGH 66

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01592 Published 2023-05-26 Fixed in 4.0.6, 3.6.14 CWE-835

Open these records in search →

Critical	22
High	265
Medium	451
Low	57
No CVSS	0