WI
Product
Wireshark
by Wireshark · last CVE Sep 29, 2026
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 237Medium 233Low 1
Watch

Add Wireshark to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3724
7.5
3%
Dec 9
Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows
Affected: 3.6.0 through 3.6.8
CVE-2022-3725
7.5
1%
Oct 27
Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.8
CVE-2022-0586
7.5
2%
Feb 14
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2
CVE-2022-0583
7.5
2%
Feb 14
Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2
CVE-2022-0581
7.5
2%
Feb 14
Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2
CVE-2021-4190
7.5
3%
Dec 30
Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.12; 3.6.0
CVE-2021-4186
7.5
2%
Dec 30
Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 through 3.4.10
CVE-2021-4185
7.5
4%
Dec 30
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.11; 3.6.0
CVE-2021-4184
7.5
4%
Dec 30
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 through 3.4.10; 3.6.0
CVE-2021-4182
7.5
3%
Dec 30
Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.11; 3.6.0
CVE-2021-4181
7.5
4%
Dec 30
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.11; 3.6.0
CVE-2021-39929
7.5
4%
Nov 19
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9
CVE-2021-39926
7.5
8%
Nov 19
Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 through 3.4.9
CVE-2021-39925
7.5
8%
Nov 19
Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9
CVE-2021-39924
7.5
5%
Nov 19
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9
CVE-2021-39923
7.5
2%
Nov 19
Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9
CVE-2021-39922
7.5
6%
Nov 19
Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9
CVE-2021-39921
7.5
3%
Nov 19
NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.17; 3.4.0 through 3.4.9
CVE-2021-39928
7.5
6%
Nov 18
NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 before 3.2.18; 3.4.0 before 3.4.10
CVE-2021-39920
7.5
3%
Nov 18
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.10
CVE-2021-22235
7.5
3%
Jul 20
Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 before 3.2.15; 3.4.0 before 3.4.7
CVE-2021-22222
7.5
2%
Jun 7
Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 through 3.4.5
CVE-2021-22174
7.5
3%
Feb 17
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.3
CVE-2021-22173
7.5
2%
Feb 17
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.3
CVE-2020-28030
7.5
2%
Nov 2
In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash
Affected: 3.2.0 through 3.2.7
CVE-2020-26575
7.5
3%
Oct 6
In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop
Affected: through 3.2.7
CVE-2020-25866
7.5
4%
Oct 6
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages
Affected: 3.0.0 through 3.0.13; 3.2.0 through 3.2.6
CVE-2020-25863
7.5
5%
Oct 6
In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash
Affected: 2.6.0 through 2.6.20; 3.0.0 through 3.0.13; 3.2.0 through 3.2.6
CVE-2020-25862
7.5
2%
Oct 6
In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash
Affected: 2.6.0 through 2.6.20; 3.0.0 through 3.0.13; 3.2.0 through 3.2.6
CVE-2020-15466
7.5
3%
Jul 5
In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop
Affected: 3.2.0 through 3.2.4
CVE-2020-13164
7.5
3%
May 19
In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash
Affected: 2.6.0 through 2.6.16; 3.0.0 through 3.0.10; 3.2.0 through 3.2.3
CVE-2020-11647
7.5
4%
Apr 10
In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash
Affected: 2.6.0 through 2.6.15; 3.0.0 through 3.0.9; 3.2.0 through 3.2.2
CVE-2020-9431
7.5
3%
Feb 27
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory
Affected: 2.6.0 through 2.6.14; 3.0.0 through 3.0.8; 3.2.0 through 3.2.1
CVE-2020-9430
7.5
3%
Feb 27
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash
Affected: 2.6.0 through 2.6.14; 3.0.0 through 3.0.8; 3.2.0 through 3.2.1
CVE-2020-9429
7.5
2%
Feb 27
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash
Affected: 3.2.0 through 3.2.1
CVE-2020-9428
7.5
3%
Feb 27
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash
Affected: 2.6.0 through 2.6.14; 3.0.0 through 3.0.8; 3.2.0 through 3.2.1
CVE-2020-7044
7.5
3%
Jan 16
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash
Affected: 3.2.0 before 3.2.1
CVE-2019-19553
7.5
4%
Dec 5
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash
Affected: 2.6.0 through 2.6.12; 3.0.0 through 3.0.6
CVE-2019-16319
7.5
4%
Sep 15
In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop
Affected: 2.6.0 through 2.6.10; 3.0.0 through 3.0.3
CVE-2019-13619
7.5
6%
Jul 17
In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash
Affected: 2.4.0 through 2.4.15; 2.6.0 through 2.6.9; 3.0.0 through 3.0.2
CVE-2019-12295
7.5
4%
May 23
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash
Affected: 2.4.0 through 2.4.14; 2.6.0 through 2.6.8; 3.0.0 through 3.0.1
CVE-2019-10903
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-10902
7.5
5%
Apr 9
In Wireshark 3.0.0, the TSDNS dissector could crash
Affected: 3.0.0
CVE-2019-10901
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-10900
7.5
5%
Apr 9
In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop
Affected: 3.0.0
CVE-2019-10899
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-10898
7.5
5%
Apr 9
In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop
Affected: 3.0.0
CVE-2019-10897
7.5
5%
Apr 9
In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop
Affected: 3.0.0
CVE-2019-10896
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-10895
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
Page 2 of 5 · 237 total
123…5
The 500 most important CVEs for this product (exploited first, then by severity)