Wireshark Foundation vulnerabilities and threats

158 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.2%	CVE-2026-76880Wireshark · Out-of-bounds Write High7.5EPSS 0.2%2026-08-19CVE Database V5CVE-2026-76880 CVE-2026-76880 is a high-severity vulnerability in Wireshark affecting versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. It is an out-of-bounds write flaw in the RRC protocol dissector that can cause the application to crash, resulting in denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. No known exploits are reported in the wild. Patch status is not confirmed from the provided data. EPSS 0.2%Vulnerability Wireshark Foundation CWE-787 #ghsa-fh6r-4w3g-qgmx	CVE Database V5	2026-08-19
High	7.5	EPSS 0.3%	CVE-2026-76879Wireshark · Stack-based Buffer Overflow High7.5EPSS 0.3%2026-08-19CVE Database V5CVE-2026-76879 A stack-based buffer overflow vulnerability exists in the C12.22 protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. This flaw can cause the application to crash, resulting in a denial of service condition. EPSS 0.3%Vulnerability Wireshark Foundation CWE-121 #ghsa-wjf3-82r2-8vvm	CVE Database V5	2026-08-19
Low	3.1	EPSS 0.2%	CVE-2026-76887Wireshark · Heap-based Buffer Overflow Low3.1EPSS 0.2%2026-08-19CVE Database V5CVE-2026-76887 Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-08-19
High	8.1	EPSS 0.4%	CVE-2026-76886Wireshark · Heap-based Buffer Overflow High8.1EPSS 0.4%2026-08-19CVE Database V5CVE-2026-76886 CVE-2026-76886 is a heap-based buffer overflow vulnerability in the C12.22 protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. This flaw can cause the application to crash, resulting in a denial of service condition. EPSS 0.4%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-08-19
Medium	4.7	EPSS 0.1%	CVE-2026-19694Wireshark · Heap-based Buffer Overflow Medium4.7EPSS 0.1%2026-08-13CVE Database V5CVE-2026-19694 These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed. EPSS 0.1%Vulnerability Wireshark Foundation CWE-122 #ghsa-qq24-2w7c-56vq	CVE Database V5	2026-08-13
Medium	4.7	EPSS 0.1%	CVE-2026-19695Wireshark · Stack-based Buffer Overflow Medium4.7EPSS 0.1%2026-08-13CVE Database V5CVE-2026-19695 Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-121 #ghsa-7xc8-pfc8-qj6v	CVE Database V5	2026-08-13
Medium	6.6	EPSS 0.1%	CVE-2026-19696Wireshark · Out-of-bounds Write Medium6.6EPSS 0.1%2026-08-13CVE Database V5CVE-2026-19696 Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows EPSS 0.1%Vulnerability Wireshark Foundation CWE-787 #ghsa-5rr4-x8fc-q7fc	CVE Database V5	2026-08-13
Low	2.5	EPSS 0.1%	CVE-2026-15168Wireshark · Use of Uninitialized Variable Low2.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15168 BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure EPSS 0.1%Vulnerability Wireshark Foundation CWE-457	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15166Wireshark · Stack-based Buffer Overflow Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15166 IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-121	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15174Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15174 Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15172Wireshark · Unchecked Input for Loop Condition Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15172 FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-606	CVE Database V5	2026-07-08
Medium	4.7	EPSS 0.1%	CVE-2026-15173Wireshark · Heap-based Buffer Overflow Medium4.7EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15173 pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15171Wireshark · NULL Pointer Dereference Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15171 SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.3%	CVE-2026-15169Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.3%2026-07-08CVE Database V5CVE-2026-15169 UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.3%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-07-08
High	7.5	EPSS 0.3%	CVE-2026-15167Wireshark · Stack-based Buffer Overflow High7.5EPSS 0.3%2026-07-08CVE Database V5CVE-2026-15167 DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.3%Vulnerability Wireshark Foundation CWE-121	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15170Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15170 Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15165Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15165 TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.3%	CVE-2026-15163Wireshark · Infinite Loop Medium5.5EPSS 0.3%2026-07-08CVE Database V5CVE-2026-15163 Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service EPSS 0.3%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-07-08
Medium	5.5	EPSS 0.1%	CVE-2026-15164Wireshark Foundation ciscodump · Heap-based Buffer Overflow Medium5.5EPSS 0.1%2026-07-08CVE Database V5CVE-2026-15164 Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service EPSS 0.1%Vulnerability CWE-122	CVE Database V5	2026-07-08
Medium	5.5	EPSS <0.1%	CVE-2026-9759Wireshark · NULL Pointer Dereference Medium5.5EPSS <0.1%2026-05-27CVE Database V5CVE-2026-9759 A NULL pointer dereference vulnerability exists in the ROHC protocol dissector of Wireshark versions 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15. This flaw can cause the application to crash, resulting in a denial of service condition. EPSS <0.1%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2026-05-27

Page 3 of 8