Login Request a demo
WI
Product
Wireshark
by Wireshark · last CVE Sep 29, 2026
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Vulnerabilities795In the news0Timeline
Severity mix
Critical 3High 237Medium 233Low 1
Severity
All severities500Critical3High237Medium233Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wireshark to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76926
6.5
0%
Aug 19
Reachable Assertion in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76891
6.5
0%
Aug 19
Expired Pointer Dereference in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76890
6.5
0%
Aug 19
Expired Pointer Dereference in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76885
6.5
0%
Aug 19
Buffer Over-read in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76887
6.5
0%
Aug 19
Heap-based Buffer Overflow in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76884
6.5
0%
Aug 19
Buffer Over-read in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-0961
6.5
0%
Jan 14
Out-of-bounds Write in Wireshark
Affected: 4.4.0 before 4.4.13; 4.6.0 before 4.6.3
CVE-2026-0962
6.5
0%
Jan 14
Out-of-bounds Write in Wireshark
Affected: 4.2.2 before 4.4.13; 4.6.0 before 4.6.3
CVE-2026-0959
6.5
0%
Jan 14
Out-of-bounds Write in Wireshark
Affected: 4.4.0 before 4.4.13; 4.6.0 before 4.6.3
CVE-2025-5601
6.5
0%
Jun 4
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
Affected: 4.2.0 before 4.2.12; 4.4.0 before 4.4.7
CVE-2023-6174
6.5
1%
Nov 16
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
Affected: 4.0.0 through 4.0.10
CVE-2023-5371
6.5
1%
Oct 4
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.17; 4.0.0 before 4.0.9
CVE-2023-2906
6.5
3%
Aug 25
Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a…
Affected: 2.0.0 through 4.0.7
CVE-2023-0668
6.5
2%
Jun 7
Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer…
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-0667
6.5
2%
Jun 7
Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a…
Affected: 4.0.0 before 4.0.6
CVE-2023-0666
6.5
2%
Jun 7
Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow,…
Affected: 4.0.0 before 4.0.6
CVE-2023-2952
6.5
1%
May 30
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2858
6.5
2%
May 26
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2857
6.5
1%
May 26
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2856
6.5
2%
May 26
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2855
6.5
2%
May 26
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2854
6.5
1%
May 26
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-1994
6.5
1%
Apr 12
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.13; 4.0.0 before 4.0.5
CVE-2023-1993
6.5
4%
Apr 12
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.13; 4.0.0 before 4.0.5
CVE-2023-0417
6.5
1%
Jan 26
Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0416
6.5
1%
Jan 26
GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0415
6.5
1%
Jan 26
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0414
6.5
1%
Jan 26
Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file
Affected: 4.0.0 through 4.0.2
CVE-2023-0413
6.5
1%
Jan 26
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0411
6.5
1%
Jan 26
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2022-4345
6.5
1%
Jan 12
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture…
Affected: 3.6.0 before 3.6.10; 4.0.0 before 4.0.2
CVE-2022-0585
6.5
2%
Feb 18
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2
CVE-2021-22207
6.5
2%
Apr 23
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.12; 3.4.0 through 3.4.4
CVE-2020-17498
6.5
3%
Aug 13
In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash
Affected: 3.2.0 before 3.2.6
CVE-2020-7045
6.5
1%
Jan 16
In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash
Affected: 3.0.0 before 3.0.8
CVE-2018-5335
6.5
2%
Jan 11
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash
Affected: 2.2.0 through 2.2.11; 2.4.0 through 2.4.3
CVE-2018-5334
6.5
2%
Jan 11
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash
Affected: 2.2.0 through 2.2.11; 2.4.0 through 2.4.3
CVE-2017-7700
6.5
2%
Apr 12
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file
Affected: 2.0.0 through 2.0.11; 2.2.0 through 2.2.5
CVE-2016-9376
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9375
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9374
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9373
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9372
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file
Affected: 2.2.0; 2.2.1
CVE-2016-7180
5.9
2%
Sep 9
epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7179
5.9
3%
Sep 9
Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7178
5.9
2%
Sep 9
epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7177
5.9
2%
Sep 9
epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7176
5.9
3%
Sep 9
epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7175
5.9
1%
Sep 9
epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-5359
5.9
3%
Aug 7
epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer…
Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +6 more
Page 1 of 5 · 233 total
12…5
The 500 most important CVEs for this product (exploited first, then by severity)