Login Request a demo
WI
Product
Wireshark
by Wireshark Foundation · last CVE Sep 29, 2026
185
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities185In the news0Timeline
Severity mix
Critical 2High 68Medium 114Low 1
Severity
All severities185Critical2High68Medium114Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wireshark to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-4184
7.5
4%
Dec 30
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: =3.6.0; >=3.4.0, <3.4.10
CVE-2021-4185
7.5
4%
Dec 30
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: =3.6.0; >=3.4.0, <3.4.10
CVE-2021-4186
7.5
2%
Dec 30
Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10
CVE-2021-4190
7.5
3%
Dec 30
Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file
Affected: =3.6.0
CVE-2021-4182
7.5
3%
Dec 30
Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: =3.6.0; >=3.4.0, <3.4.10
CVE-2021-4181
7.5
4%
Dec 30
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected: =3.6.0; >=3.4.0, <3.4.10
CVE-2021-39923
7.5
2%
Nov 19
Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.2.0, <3.2.18; >=3.4.0, <3.4.10
CVE-2021-39921
7.5
3%
Nov 19
NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10; >=3.2.0, <3.2.18
CVE-2021-39922
7.5
6%
Nov 19
Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10; >=3.2.0, <3.2.18
CVE-2021-39929
7.5
4%
Nov 19
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10; >=3.2.0, <3.2.18
CVE-2021-39925
7.5
8%
Nov 19
Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10; >=3.2.0, <3.2.18
CVE-2021-39926
7.5
8%
Nov 19
Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10
CVE-2021-39924
7.5
5%
Nov 19
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10; >=3.2.0, <3.2.18
CVE-2021-39928
7.5
6%
Nov 18
NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10; >=3.2.0, <3.2.18
CVE-2021-39920
7.5
3%
Nov 18
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Affected: >=3.4.0, <3.4.10
CVE-2026-96423
7.1
0%
Sep 29
Heap-based Buffer Overflow in Wireshark
Affected: 4.6.0 before 4.6.9; 4.4.0 before 4.4.19
CVE-2023-1161
7.1
1%
Mar 6
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
Affected: >=4.0.0, <4.0.4; >=3.6.0, <3.6.12
CVE-2023-0412
7.1
1%
Jan 24
TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
Affected: >=4.0.0, <4.0.3; >=3.6.0, <3.6.11
Page 2 of 2 · 68 total
12