Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wireshark compares to other vendors in security performance

View Risk Score →

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 38
Severity
7.1
EPSS
0.13%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96423

Wireshark WiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service

First published (updated )
CVE-2026-95386

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 77
Severity
8.8
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95387

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95388

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95389

Wireshark WiresharkNULL Pointer Dereference in Wireshark

Risk 31
Severity
5.5
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service

First published (updated )
CVE-2026-95390

Wireshark WiresharkUse After Free in Wireshark

Risk 31
Severity
5.5
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service

First published (updated )
CVE-2026-95391

Wireshark WiresharkBuffer Over-read in Wireshark

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95392

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 27
Severity
4.7
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95393

Wireshark Foundation WiresharkUnchecked Input for Loop Condition in Wireshark

Risk 27
Severity
4.7
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95394

Wireshark WiresharkMissing Release of Memory after Effective Lifetime in Wireshark

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-95395

Wireshark WiresharkImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

Risk 51
Severity
7.8
EPSS
0.19%
Path Traversal
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution

First published (updated )
CVE-2026-96419

Wireshark WiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Risk 23
Severity
5.5
EPSS
0.14%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96418

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 23
Severity
5.5
EPSS
0.15%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96417

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 23
Severity
5.5
EPSS
0.14%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96416

Wireshark WiresharkStack-based Buffer Overflow in Wireshark

Risk 23
Severity
5.5
EPSS
0.14%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96415

Wireshark WiresharkBuffer Over-read in Wireshark

Risk 23
Severity
5.5
EPSS
0.12%
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96420

Wireshark WiresharkImproperly Controlled Sequential Memory Allocation in Wireshark

Risk 23
Severity
5.5
EPSS
0.13%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-96421

Wireshark WiresharkReachable Assertion in Wireshark

Risk 23
Severity
5.5
EPSS
0.13%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Remedy

Upgrade to version 4.6.9 or above
First published (updated )
CVE-2026-96422

Wireshark WiresharkNULL Pointer Dereference in Wireshark

Risk 51
Severity
7.8
EPSS
0.05%
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service

First published (updated )
CVE-2025-9817

Wireshark WiresharkZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability

Risk 73

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-96417.

First published (updated )
ZDI-CAN-31780

Wireshark WiresharkWireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability

Risk 65

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-96417.

First published (updated )
Advisory
ZDI-26-747

Wireshark WiresharkNULL Pointer Dereference in Wireshark

Risk 43
Severity
7.5
Null Pointer Dereference
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76927

Wireshark WiresharkOut-of-bounds Read in Wireshark

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76924

Wireshark WiresharkNULL Pointer Dereference in Wireshark

Risk 31
Severity
5.5
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76922

Wireshark WiresharkUse of Uninitialized Variable in Wireshark

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76919

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76917

Wireshark sharkdExpired Pointer Dereference in Wireshark

Risk 37
Severity
6.5
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76891

Wireshark (sharkd)Expired Pointer Dereference in Wireshark

Risk 37
Severity
6.5
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76890

Wireshark WiresharkHeap-based Buffer Overflow in Wireshark

Risk 31
Severity
5.5
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

First published (updated )
CVE-2026-76889

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203