DEBIAN-CVE-2026-76886

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

DEBIAN-CVE-2026-76882

Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

DEBIAN-CVE-2026-76888

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

DEBIAN-CVE-2026-76889

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76881

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76924 Out-of-bounds Read in Wireshark

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76923

An out-of-bounds read vulnerability exists in the Bluetooth HFP (Hands-Free Profile) protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A remote attacker can exploit this by tricking a user into opening a specially crafted capture file , causing Wireshark to crash...

CVE-2026-76923 Out-of-bounds Read in Wireshark

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922 NULL Pointer Dereference in Wireshark

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76919

Wireshark is affected in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The ESS protocol dissector crashes due to a use of an uninitialized variable when processing malformed network traffic, enabling unauthenticated remote denial of service (CVSS 5.3). Exploitation in the wild is not documented in the p...

CVE-2026-76919 Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918 Heap-based Buffer Overflow in Wireshark

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917 Heap-based Buffer Overflow in Wireshark

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917

A heap-based buffer overflow exists in the Bluetooth AVRCP (Audio/Video Remote Control Profile) protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 . A local user who processes a specially crafted Bluetooth AVRCP packet can trigger a crash of the Wireshark application, res...

CVE-2026-76880 Out-of-bounds Write in Wireshark

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

Wireshark's C12.22 protocol dissector contains a stack-based buffer overflow in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The flaw allows a remote, unauthenticated attacker to send crafted C12.22 protocol traffic causing the dissector to crash, resulting in denial of service (CVSS 7.5 HIGH, availabi...

CVE-2026-76879 Stack-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76888

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 have a flaw in the RDP protocol dissector that can be triggered by crafted RDP traffic, causing a crash and denial of service. CVSS 3.1 scores LOW (3.1). Exploitation details are not provided. Upgrade to a patched version per WNPASec-2026-67.

PT-2026-78840

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the C12.22 protocol dissector allows a denial of service. A dissector is a software component that breaks down network traffic into a...