Wireshark Foundation vulnerabilities and threats

158 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.2%	CVE-2026-7379Wireshark · Memory Leak Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-7379 Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-401	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-7375Wireshark · Infinite Loop Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-7375 UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-7376Wireshark · NULL Pointer Dereference Medium5.5EPSS 0.2%2026-04-30CVE Database V5CVE-2026-7376 Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2026-04-30
Medium	5.5	EPSS 0.2%	CVE-2026-3203Wireshark · Buffer Over-read Medium5.5EPSS 0.2%2026-02-25CVE Database V5CVE-2026-3203 RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-126	CVE Database V5	2026-02-25
Medium	4.7	EPSS 0.2%	CVE-2026-3202Wireshark · NULL Pointer Dereference Medium4.7EPSS 0.2%2026-02-25CVE Database V5CVE-2026-3202 NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2026-02-25
Medium	4.7	EPSS 0.2%	CVE-2026-3201Wireshark · Improperly Controlled Sequential Memory Allocation Medium4.7EPSS 0.2%2026-02-25CVE Database V5CVE-2026-3201 USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-1325	CVE Database V5	2026-02-25
Medium	5.5	EPSS 0.2%	CVE-2026-0961Wireshark · Out-of-bounds Write Medium5.5EPSS 0.2%2026-01-14CVE Database V5CVE-2026-0961 BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-787	CVE Database V5	2026-01-14
Medium	5.3	EPSS 0.3%	CVE-2026-0962Wireshark · Out-of-bounds Write Medium5.3EPSS 0.3%2026-01-14CVE Database V5CVE-2026-0962 SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service EPSS 0.3%Vulnerability Wireshark Foundation CWE-787	CVE Database V5	2026-01-14
Medium	4.7	EPSS 0.1%	CVE-2026-0960Wireshark · Infinite Loop Medium4.7EPSS 0.1%2026-01-14CVE Database V5CVE-2026-0960 HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2026-01-14
Medium	5.3	EPSS 0.2%	CVE-2026-0959Wireshark · Out-of-bounds Write Medium5.3EPSS 0.2%2026-01-14CVE Database V5CVE-2026-0959 IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-787	CVE Database V5	2026-01-14
Medium	5.5	EPSS 0.1%	CVE-2025-13946Wireshark · Infinite Loop Medium5.5EPSS 0.1%2025-12-03CVE Database V5CVE-2025-13946 MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2025-12-03
Medium	5.5	EPSS 0.2%	CVE-2025-13945Wireshark · Improperly Controlled Sequential Memory Allocation Medium5.5EPSS 0.2%2025-12-03CVE Database V5CVE-2025-13945 HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-1325	CVE Database V5	2025-12-03
Medium	5.5	EPSS 0.1%	CVE-2025-13674Wireshark · Access of Uninitialized Pointer Medium5.5EPSS 0.1%2025-11-26CVE Database V5CVE-2025-13674 BPv7 dissector crash in Wireshark 4.6.0 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-824	CVE Database V5	2025-11-26
High	7.8	EPSS 0.1%	CVE-2025-13499Wireshark · Access of Uninitialized Pointer High7.8EPSS 0.1%2025-11-21CVE Database V5CVE-2025-13499 Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-824	CVE Database V5	2025-11-21
Medium	5.5	EPSS 0.1%	CVE-2025-11626Wireshark · Infinite Loop Medium5.5EPSS 0.1%2025-10-10CVE Database V5CVE-2025-11626 MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service EPSS 0.1%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2025-10-10
High	7.8	EPSS 0.2%	CVE-2025-9817Wireshark · NULL Pointer Dereference High7.8EPSS 0.2%2025-09-03CVE Database V5CVE-2025-9817 SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service EPSS 0.2%Vulnerability Wireshark Foundation CWE-476	CVE Database V5	2025-09-03
High	7.8	EPSS 0.3%	CVE-2025-5601Wireshark · Classic Buffer Overflow High7.8EPSS 0.3%2025-06-04CVE Database V5CVE-2025-5601 Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-120	CVE Database V5	2025-06-04
High	7.8	EPSS 0.3%	CVE-2025-1492Wireshark · Uncontrolled Recursion High7.8EPSS 0.3%2025-02-20CVE Database V5CVE-2025-1492 Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-674	CVE Database V5	2025-02-20
High	7.8	EPSS 0.3%	CVE-2024-11596Wireshark · Buffer Over-read High7.8EPSS 0.3%2024-11-21CVE Database V5CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-126	CVE Database V5	2024-11-21
High	7.8	EPSS 0.3%	CVE-2024-11595Wireshark · Infinite Loop High7.8EPSS 0.3%2024-11-21CVE Database V5CVE-2024-11595 FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file EPSS 0.3%Vulnerability Wireshark Foundation CWE-835	CVE Database V5	2024-11-21

Page 6 of 8