Threat database

CVE-2026-96422 is a reachable assertion vulnerability in Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. It causes a crash in the frame protocol metadissector, leading to a denial of service condition. The vulnerability requires local access and user interaction to be exploited and does not impact confidentiality or integrity.

CVE-2026-96421 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. It involves an infinite loop and memory leak in the USB HID protocol dissector, which can lead to a denial of service condition. The vulnerability does not impact confidentiality or integrity but affects availability. No known exploits are reported in the wild. No official patch or remediation details are provided in the available data.

CVE-2026-96420 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.8. It involves a buffer over-read in the Toshiba file parser that can cause the application to crash, resulting in a denial of service. The vulnerability requires local access with high attack complexity and user interaction. There is no indication of confidentiality or integrity impact.

CVE-2026-96419 is a path traversal vulnerability in Wireshark that affects versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. The flaw occurs during the profile import process and can cause the application to crash, resulting in a denial of service. There is also potential for code execution. The vulnerability has a medium severity rating with a CVSS score of 5.5.

CVE-2026-96418 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. It involves an infinite loop in the TIFF protocol dissector that can cause a denial of service. The flaw arises from a loop with an unreachable exit condition, leading to resource exhaustion when processing crafted TIFF data. No confidentiality or integrity impact is reported. No known exploits are currently in the wild.

A heap-based buffer overflow vulnerability exists in the RF4CE protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability requires local access with low complexity and user interaction, and it does not impact confidentiality or integrity.

A heap-based buffer overflow vulnerability exists in the IEEE 802.11 protocol dissector of Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition.

A stack-based buffer overflow vulnerability exists in the Catapult DCT2000 protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5.

CVE-2026-95395 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.8. It involves a memory leak in the IEEE C37.118 Synchrophasor protocol dissector that can lead to denial of service. The flaw is due to missing release of memory after its effective lifetime. No known exploits are reported in the wild. No official patch information is provided in the input data.

CVE-2026-95394 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. It involves unchecked input for a loop condition in the Microsoft Network Monitor file parser, which can lead to a denial of service.

A heap-based buffer overflow vulnerability exists in the CSN.1 protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 4.7.

A buffer over-read vulnerability exists in the MBIM protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5.

A use-after-free vulnerability in the ZigBee ZCL protocol dissector of Wireshark versions 4.6.0 through 4.6.8 can cause the application to crash, resulting in a denial of service condition.

A NULL pointer dereference vulnerability exists in Wireshark versions 4.6.0 through 4.6.8 in the PEAK CAN TRC file parser. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 5.5.

A heap-based buffer overflow vulnerability exists in the SCTP protocol dissector of Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition.

A heap-based buffer overflow vulnerability exists in the Sharkd utility of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This flaw can cause the utility to crash, resulting in a denial of service condition. The vulnerability requires local access with user interaction to be exploited and does not impact confidentiality or integrity.

CVE-2026-95387 is a heap-based buffer overflow vulnerability in the SPDY protocol dissector of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.8. This vulnerability can cause Wireshark to crash, resulting in a denial of service condition. The flaw has a high severity with a CVSS score of 8.1. No known exploits are reported in the wild. No patch or official fix information is provided in the available data.

CVE-2026-95386 is a medium severity vulnerability in Wireshark versions 4.6.0 through 4.6.8. It involves an infinite loop in the TTL file parser due to a loop with an unreachable exit condition, which can cause a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but affects availability by potentially causing the application to hang or become unresponsive.

CVE-2026-96423 is a heap-based buffer overflow vulnerability in the X11 protocol dissector of Wireshark versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.8. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability requires local access with user interaction to be exploited and does not impact confidentiality or integrity. The issue has a medium severity rating with a CVSS score of 5.5.

CVE-2026-76929 is an out-of-bounds read vulnerability in the pcapng file parser of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. This flaw can cause the application to crash, leading to a denial of service condition. The vulnerability has a medium severity rating with a CVSS score of 4.7.