Security feed

25 October 2026

advisoryMediumOfficial CVE List25 Oct 2026

Heap-based Buffer Overflow in Wireshark

X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96423

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96423

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96423
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #21435 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 05:45:06 GMT
Publisher date: Tue, 29 Sep 2026 09:30:38 GMT

Read the original announcement

24 October 2026

advisoryMediumOfficial CVE List24 Oct 2026

Missing Release of Memory after Effective Lifetime in Wireshark

IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95395

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95395

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95395
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3799 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:52 GMT
Publisher date: Tue, 29 Sep 2026 09:33:18 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Unchecked Input for Loop Condition in Wireshark

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95394

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95394

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95394
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3798 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:51 GMT
Publisher date: Tue, 29 Sep 2026 09:33:08 GMT

Read the original announcement

advisoryHighOfficial CVE List24 Oct 2026

Heap-based Buffer Overflow in Wireshark

SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95387

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95387

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95387
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #3797 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:51 GMT
Publisher date: Tue, 29 Sep 2026 09:33:13 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Reachable Assertion in Wireshark

Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96422

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96422

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96422
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3790 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:46 GMT
Publisher date: Tue, 29 Sep 2026 09:31:08 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Improperly Controlled Sequential Memory Allocation in Wireshark

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96421

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96421

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96421
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3789 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:46 GMT
Publisher date: Tue, 29 Sep 2026 09:31:03 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Heap-based Buffer Overflow in Wireshark

RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96417

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96417

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96417
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3788 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:45 GMT
Publisher date: Tue, 29 Sep 2026 09:30:58 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Heap-based Buffer Overflow in Wireshark

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95393

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95393

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95393
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3787 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:45 GMT
Publisher date: Tue, 29 Sep 2026 09:33:03 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Buffer Over-read in Wireshark

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95392

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95392

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95392
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3786 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:44 GMT
Publisher date: Tue, 29 Sep 2026 09:32:58 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Use After Free in Wireshark

ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95391

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95391

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95391
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3785 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:44 GMT
Publisher date: Tue, 29 Sep 2026 09:33:43 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Heap-based Buffer Overflow in Wireshark

Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95388

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95388

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95388
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3784 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:43 GMT
Publisher date: Tue, 29 Sep 2026 09:31:13 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Buffer Over-read in Wireshark

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96420

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96420

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96420
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3770 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:34 GMT
Publisher date: Tue, 29 Sep 2026 09:30:43 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution

Announced 29 Sept 2026

Wireshark CVE-2026-96419

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96419

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96419
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3769 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:33 GMT
Publisher date: Tue, 29 Sep 2026 09:30:48 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96418

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96418

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96418
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3768 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:32 GMT
Publisher date: Tue, 29 Sep 2026 09:30:53 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Heap-based Buffer Overflow in Wireshark

IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96416

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96416

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96416
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3767 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:32 GMT
Publisher date: Tue, 29 Sep 2026 09:30:33 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

NULL Pointer Dereference in Wireshark

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95390

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95390

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95390
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3762 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:28 GMT
Publisher date: Tue, 29 Sep 2026 09:33:23 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Stack-based Buffer Overflow in Wireshark

Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-96415

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96415

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-96415
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3761 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:28 GMT
Publisher date: Tue, 29 Sep 2026 09:30:28 GMT

Read the original announcement

advisoryHighOfficial CVE List24 Oct 2026

Heap-based Buffer Overflow in Wireshark

SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95389

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95389

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95389
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #3760 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:27 GMT
Publisher date: Tue, 29 Sep 2026 09:33:38 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service

Announced 29 Sept 2026

Wireshark CVE-2026-95386

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95386

Wireshark

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95386
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3759 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:40:26 GMT
Publisher date: Tue, 29 Sep 2026 09:33:28 GMT

Read the original announcement