Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Release: Wireshark 4.4.19, 4.6.9 Clear all filters
TI-2026-63614 CVE-2026-95389 · GHSA-7xm4-72f8-6hpw

Heap-based Buffer Overflow in Wireshark

Priority HIGH 70

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00337 Published 2026-09-29 Fixed in 4.6.9, 4.4.19 CWE-122
TI-2026-63620 CVE-2026-95395 · GHSA-pf84-5c5r-rch4

Missing Release of Memory after Effective Lifetime in Wireshark

Priority MEDIUM 58

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00137 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-401
TI-2026-63612 CVE-2026-95387 · GHSA-v28h-8438-ghj5

Heap-based Buffer Overflow in Wireshark

Priority HIGH 73

SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63619 CVE-2026-95394 · GHSA-xm65-f955-g866

Unchecked Input for Loop Condition in Wireshark

Priority MEDIUM 55

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.0014 Published 2026-09-29 Fixed in 4.6.9, 4.4.19 CWE-606
TI-2026-63618 CVE-2026-95393 · GHSA-jp3x-6949-38v9

Heap-based Buffer Overflow in Wireshark

Priority MEDIUM 55

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.00131 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63617 CVE-2026-95392 · GHSA-ww33-r9xr-r55j

Buffer Over-read in Wireshark

Priority MEDIUM 58

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00155 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-126
TI-2026-63613 CVE-2026-95388 · GHSA-xc7p-ghhr-9vx9

Heap-based Buffer Overflow in Wireshark

Priority MEDIUM 58

Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00137 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63773 CVE-2026-96422 · GHSA-gfv2-gh3h-x7gj

Reachable Assertion in Wireshark

Priority MEDIUM 58

Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00139 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-617
TI-2026-63772 CVE-2026-96421 · GHSA-wg4g-83vx-mw68

Improperly Controlled Sequential Memory Allocation in Wireshark

Priority MEDIUM 58

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00138 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-1325
TI-2026-63768 CVE-2026-96417 · GHSA-42hw-vfv7-crgr

Heap-based Buffer Overflow in Wireshark

Priority LOW 24

RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00145 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63771 CVE-2026-96420 · GHSA-f4wv-m8pm-cj63

Buffer Over-read in Wireshark

Priority LOW 23

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00092 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-126
TI-2026-63774 CVE-2026-96423 · GHSA-969r-pwxc-fjq2

Heap-based Buffer Overflow in Wireshark

Priority LOW 32

X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00141 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63767 CVE-2026-96416 · GHSA-cvf3-jq74-h5vp

Heap-based Buffer Overflow in Wireshark

Priority MEDIUM 58

IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00138 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-122
TI-2026-63766 CVE-2026-96415 · GHSA-4j63-4v66-f2cj

Stack-based Buffer Overflow in Wireshark

Priority MEDIUM 58

Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00137 Published 2026-09-29 Partial fix · 4.6.9, 4.4.19 CWE-121