Login Request a demo
WI
Product
Wireshark
by Wireshark · last CVE Sep 29, 2026
795
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities795In the news0Timeline
Severity mix
Critical 3High 237Medium 233Low 1
Severity
All severities500Critical3High237Medium233Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wireshark to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76926
6.5
0%
Aug 19
Reachable Assertion in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76891
6.5
0%
Aug 19
Expired Pointer Dereference in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76890
6.5
0%
Aug 19
Expired Pointer Dereference in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76885
6.5
0%
Aug 19
Buffer Over-read in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76887
6.5
0%
Aug 19
Heap-based Buffer Overflow in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-76884
6.5
0%
Aug 19
Buffer Over-read in Wireshark
Affected: 4.4.0 before 4.4.18; 4.6.0 before 4.6.8
CVE-2026-0961
6.5
0%
Jan 14
Out-of-bounds Write in Wireshark
Affected: 4.4.0 before 4.4.13; 4.6.0 before 4.6.3
CVE-2026-0962
6.5
0%
Jan 14
Out-of-bounds Write in Wireshark
Affected: 4.2.2 before 4.4.13; 4.6.0 before 4.6.3
CVE-2026-0959
6.5
0%
Jan 14
Out-of-bounds Write in Wireshark
Affected: 4.4.0 before 4.4.13; 4.6.0 before 4.6.3
CVE-2025-5601
6.5
0%
Jun 4
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Affected: 4.2.0 before 4.2.12; 4.4.0 before 4.4.7
CVE-2023-6174
6.5
1%
Nov 16
Out-of-bounds Read in Wireshark
Affected: 4.0.0 through 4.0.10
CVE-2023-5371
6.5
1%
Oct 4
Memory Allocation with Excessive Size Value in Wireshark
Affected: 3.6.0 before 3.6.17; 4.0.0 before 4.0.9
CVE-2023-2906
6.5
3%
Aug 25
Wireshark CP2179 divide by zero
Affected: 2.0.0 through 4.0.7
CVE-2023-0667
6.5
2%
Jun 7
Wireshark MSMMS parsing buffer overflow
Affected: 4.0.0 before 4.0.6
CVE-2023-0668
6.5
2%
Jun 7
Wireshark IEEE-C37.118 parsing buffer overflow
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-0666
6.5
2%
Jun 7
Wireshark RTPS Parsing Buffer Overflow
Affected: 4.0.0 before 4.0.6
CVE-2023-2952
6.5
1%
May 30
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2854
6.5
1%
May 26
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2858
6.5
2%
May 26
NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2857
6.5
1%
May 26
BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2856
6.5
2%
May 26
VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-2855
6.5
2%
May 26
Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file
Affected: 3.6.0 before 3.6.14; 4.0.0 before 4.0.6
CVE-2023-1993
6.5
4%
Apr 12
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.13; 4.0.0 before 4.0.5
CVE-2023-1994
6.5
1%
Apr 12
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 before 3.6.13; 4.0.0 before 4.0.5
CVE-2023-0411
6.5
1%
Jan 24
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0416
6.5
1%
Jan 24
GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0413
6.5
1%
Jan 24
Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0417
6.5
1%
Jan 24
Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2023-0414
6.5
1%
Jan 24
Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file
Affected: 4.0.0 through 4.0.2
CVE-2023-0415
6.5
1%
Jan 24
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: 3.6.0 through 3.6.10; 4.0.0 through 4.0.2
CVE-2022-4345
6.5
1%
Jan 12
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture…
Affected: 3.6.0 before 3.6.10; 4.0.0 before 4.0.2
CVE-2022-0585
6.5
2%
Feb 18
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file
Affected: 3.4.0 before 3.4.12; 3.6.0 before 3.6.2
CVE-2021-22207
6.5
2%
Apr 23
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
Affected: 3.2.0 through 3.2.12; 3.4.0 through 3.4.4
CVE-2020-17498
6.5
3%
Aug 13
In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash
Affected: 3.2.0 before 3.2.6
CVE-2020-7045
6.5
1%
Jan 16
In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash
Affected: 3.0.0 before 3.0.8
CVE-2018-5335
6.5
2%
Jan 11
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash
Affected: 2.2.0 through 2.2.11; 2.4.0 through 2.4.3
CVE-2018-5334
6.5
2%
Jan 11
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash
Affected: 2.2.0 through 2.2.11; 2.4.0 through 2.4.3
CVE-2017-7700
6.5
2%
Apr 12
In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file
Affected: 2.0.0 through 2.0.11; 2.2.0 through 2.2.5
CVE-2016-9372
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file
Affected: 2.2.0; 2.2.1
CVE-2016-9376
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9375
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9374
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-9373
5.9
2%
Nov 17
In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more
CVE-2016-7179
5.9
3%
Sep 9
Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7180
5.9
2%
Sep 9
epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7178
5.9
2%
Sep 9
epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7177
5.9
2%
Sep 9
epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7176
5.9
3%
Sep 9
epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-7175
5.9
1%
Sep 9
epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5
CVE-2016-5351
5.9
2%
Aug 7
epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers…
Affected: 1.12.0; 1.12.1; 1.12.2; 1.12.3; 1.12.4; 1.12.5; +10 more
Page 1 of 5 · 233 total
12…5
The 500 most important CVEs for this product (exploited first, then by severity)