Wireshark Foundation vulnerabilities and threats

158 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.2%	CVE-2026-6534Wireshark · Infinite Loop Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6534 USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6533Wireshark · Improperly Controlled Sequential Memory Allocation Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6533 Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-1325	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6532Wireshark · Buffer Over-read Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6532 Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-126	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6531Wireshark · Infinite Loop Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6531 SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6530Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6530 DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6529Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6529 iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6528Wireshark · Infinite Loop Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6528 TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6527Wireshark · Uncontrolled Recursion Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6527 ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6526Wireshark · NULL Pointer Dereference Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6526 RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 EPSS 0.1%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6524Wireshark · Access of Uninitialized Pointer Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6524 MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-824	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6523Wireshark · Infinite Loop Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6523 GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6521Wireshark · Infinite Loop Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6521 OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6520Wireshark · Infinite Loop Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6520 OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6519Wireshark · Infinite Loop Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6519 MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6522Wireshark · Infinite Loop Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6522 RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6870Wireshark · Access of Uninitialized Pointer Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6870 GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-824	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6869Wireshark · Improperly Controlled Sequential Memory Allocation Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6869 WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-1325	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.1%	CVE-2026-6867Wireshark · Improperly Controlled Sequential Memory Allocation Medium5.5EPSS 0.1%2026-04-30CVE Database V5CVE-2026-6867 SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-1325	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-6868Wireshark · Stack-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-6868 HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-121	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-7378Wireshark · Heap-based Buffer Overflow Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-7378 Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-122	CVE Database V5	2026-04-30

Page 5 of 8