Login Request a demo
WI
Product
Wireshark
by Wireshark · last CVE Sep 29, 2026
795
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Vulnerabilities795In the news0Timeline
Severity mix
Critical 3High 237Medium 233Low 1
Severity
All severities500Critical3High237Medium233Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wireshark to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10897
7.5
5%
Apr 9
In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop
Affected: 3.0.0
CVE-2019-10896
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-10895
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-10894
7.5
6%
Apr 9
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash
Affected: 2.4.0 through 2.4.13; 2.6.0 through 2.6.7; 3.0.0
CVE-2019-9214
7.5
4%
Feb 28
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash
Affected: 2.4.0 through 2.4.12; 2.6.0 through 2.6.6
CVE-2019-9208
7.5
4%
Feb 28
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash
Affected: 2.4.0 through 2.4.12; 2.6.0 through 2.6.6
CVE-2018-19628
7.5
3%
Nov 29
In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash
Affected: 2.6.0 through 2.6.4
CVE-2018-19627
7.5
18%
Nov 29
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash
Affected: 2.4.0 through 2.4.10; 2.6.0 through 2.6.4
CVE-2018-19623
7.5
4%
Nov 29
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash
Affected: 2.4.0 through 2.4.10; 2.6.0 through 2.6.4
CVE-2018-19622
7.5
3%
Nov 29
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop
Affected: 2.4.0 through 2.4.10; 2.6.0 through 2.6.4
CVE-2018-18227
7.5
3%
Oct 12
In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash
Affected: 2.4.0 through 2.4.9; 2.6.0 through 2.6.3
CVE-2018-18226
7.5
3%
Oct 12
In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory
Affected: 2.6.0 through 2.6.3
CVE-2018-18225
7.5
3%
Oct 12
In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash
Affected: 2.6.0 through 2.6.3
CVE-2018-16058
7.5
4%
Aug 30
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash
Affected: 2.2.0 through 2.2.16; 2.4.0 through 2.4.8; 2.6.0 through 2.6.2
CVE-2018-16057
7.5
4%
Aug 30
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash
Affected: 2.2.0 through 2.2.16; 2.4.0 through 2.4.8; 2.6.0 through 2.6.2
CVE-2018-16056
7.5
3%
Aug 30
In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash
Affected: 2.2.0 through 2.2.16; 2.4.0 through 2.4.8; 2.6.0 through 2.6.2
CVE-2018-14438
7.5
1%
Jul 20
In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the…
Affected: through 2.6.2
CVE-2018-14370
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash
Affected: 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14369
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14368
7.5
4%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14367
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash
Affected: 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14344
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14343
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14342
7.5
4%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14341
7.5
4%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14340
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-14339
7.5
3%
Jul 19
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop
Affected: 2.2.0 through 2.2.15; 2.4.0 through 2.4.7; 2.6.0 through 2.6.1
CVE-2018-11362
7.5
3%
May 22
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash
Affected: 2.2.0 through 2.2.14; 2.4.0 through 2.4.6; 2.6.0
CVE-2018-11361
7.5
3%
May 22
In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash
Affected: 2.6.0
CVE-2018-11360
7.5
3%
May 22
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash
Affected: 2.2.0 through 2.2.14; 2.4.0 through 2.4.6; 2.6.0
CVE-2018-11359
7.5
3%
May 22
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash
Affected: 2.2.0 through 2.2.14; 2.4.0 through 2.4.6; 2.6.0
CVE-2018-11358
7.5
3%
May 22
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash
Affected: 2.2.0 through 2.2.14; 2.4.0 through 2.4.6; 2.6.0
CVE-2018-11357
7.5
3%
May 22
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory
Affected: 2.2.0 through 2.2.14; 2.4.0 through 2.4.6; 2.6.0
CVE-2018-11356
7.5
3%
May 22
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash
Affected: 2.2.0 through 2.2.14; 2.4.0 through 2.4.6; 2.6.0
CVE-2018-11355
7.5
3%
May 22
In Wireshark 2.6.0, the RTCP dissector could crash
Affected: 2.6.0
CVE-2018-11354
7.5
3%
May 22
In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash
Affected: 2.6.0
CVE-2018-9274
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9273
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9272
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9271
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9270
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9269
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9268
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9267
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9266
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9265
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9264
7.5
3%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9263
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9262
7.5
2%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
CVE-2018-9261
7.5
3%
Apr 4
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow
Affected: 2.2.0 through 2.2.13; 2.4.0 through 2.4.5
Page 3 of 10 · 500 total
1234…10
The 500 most important CVEs for this product (exploited first, then by severity)