CVE-2026-76880

Out-of-bounds Write in Wireshark

7.5 HighFix available

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.24%Unchanged since Aug 20, 2026

What each source reports

CVE List Score used 7.5

Out-of-bounds Write in Wireshark

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: CVE-2026-76880
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

EUVDEUVD-2026-63176 7.5

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: EUVD-2026-63176
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-fh6r-4w3g-qgmx 7.5

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: GHSA-fh6r-4w3g-qgmx
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

NVD 7.5

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: CVE-2026-76880
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSV 7.5

Out-of-bounds Write in Wireshark

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: CVE-2026-76880
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-76880 7.5

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: DEBIAN-CVE-2026-76880
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 16 moreShow less

OSVOESA-2026-3584 8.1

wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.

Security Fix(es):

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76879)

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76880)

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76881)

Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76882)

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76883)

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76884)

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76885)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76886)

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76887)

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76888)

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76889)

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76890)

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76891)

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76917)

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76918)

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76919)

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76920)

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76921)

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76922)

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76923)

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76924)

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76926)

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76927)

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76928)

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76929)

Record: OESA-2026-3584
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83546 8.1

Red Hat Security Advisory: wireshark security update

Record: RHSA-2026:83546
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:83657 6.5

Red Hat Security Advisory: wireshark security update

Record: RHSA-2026:83657
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2026:84721 8.1

Red Hat Security Advisory: wireshark security update

Record: RHSA-2026:84721
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:83546 8.1

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:83546
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:83657 6.5

Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:83657
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2026:84721 8.1

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879)
wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928)
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-95389)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:84721
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-76880 7.5

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: UBUNTU-CVE-2026-76880
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2026:83546 No score

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:83546
Updated: 2026-11-02

OSVALSA-2026:83657 No score

Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:83657
Updated: 2026-11-02

OSVALSA-2026:84721 No score

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879)
wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928)
wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-95389)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:84721
Updated: 2026-11-02

OSVAZL-96785 No score

CVE-2026-76880 affecting package wireshark 4.4.7-2

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record: AZL-96785
Updated: 2026-11-05

OSVopenSUSE-SU-2026:11579-1 No score

libwireshark19-4.6.8-2.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11579-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:22014-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record: openSUSE-SU-2026:22014-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24013-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record: SUSE-SU-2026:24013-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4379-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.6.8:

CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
CVE-2026-76884: ERF file parser crash (bsc#1275834).
CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
CVE-2026-76890: Sharkd utility crash (bsc#1275841).
CVE-2026-76891: Sharkd utility crash (bsc#1275844).
CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

Record: SUSE-SU-2026:4379-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-cli` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-devel` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark` AlmaLinux:8 From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-cli` AlmaLinux:8 From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-devel` AlmaLinux:8 From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark` AlmaLinux:10 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-cli` AlmaLinux:10 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-devel` AlmaLinux:10 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark` Azure Linux:3	through 4.4.7-2	None known

Show 45 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark` Debian:12	All versions, plus listed versions 4.0.10-14.0.11-14.0.11-1~deb12u14.0.17-0+deb12u14.0.17-0+deb12u2 Show 45 moreShow less 4.0.17-0+deb12u34.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-14.2.0-14.2.0-1~exp04.2.0~rc3-1~exp14.2.2-14.2.2-1.14.2.2-1.1~exp14.2.4-14.2.5-14.2.5-24.2.6-14.4.0-0exp14.4.0-0exp24.4.0-14.4.1-14.4.2-14.4.3-14.4.4-14.4.5-14.4.6-14.4.6-24.4.7-0exp14.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-14.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2	None known
`wireshark` Debian:13	before 4.4.18-0+deb13u1, plus listed versions 4.4.13-0+deb13u14.4.14-0+deb13u14.4.15-0+deb13u14.4.16-0+deb13u14.4.7-14.4.8-0exp14.4.9-1	4.4.18-0+deb13u1
`wireshark` Debian:14	before 4.6.9-1, plus listed versions 4.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-1 Show 11 moreShow less 4.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2	4.6.9-1
`wireshark` openEuler:24.03-LTS-SP1 From an advisory covering 25 CVEs	before 4.4.18-1.oe2403sp1	4.4.18-1.oe2403sp1
`wireshark` Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-cli` Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-cli-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-cli-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-cli` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-cli-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-cli-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark` Red Hat:enterprise_linux:10.2 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-cli` Red Hat:enterprise_linux:10.2 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-cli-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-debugsource` Red Hat:enterprise_linux:10.2 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark` Rocky Linux:9 From an advisory covering 5 CVEs	before 1:3.4.10-9.el9_8.5	1:3.4.10-9.el9_8.5
`wireshark` Rocky Linux:8 From an advisory covering 4 CVEs	before 1:2.6.2-21.el8_10	1:2.6.2-21.el8_10
`wireshark` Rocky Linux:10 From an advisory covering 8 CVEs	before 1:4.4.2-10.el10_2.8	1:4.4.2-10.el10_2.8
`wireshark` SUSE:Linux Enterprise Server 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1
`wireshark` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 28 CVEs	before 4.6.8-150700.21.14.1	4.6.8-150700.21.14.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 28 CVEs	before 4.6.8-150700.21.14.1	4.6.8-150700.21.14.1
`wireshark` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3	None known
`wireshark` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less 2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2	None known
`wireshark` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less 2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2	None known
`wireshark` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2	None known
`wireshark` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1	None known
`wireshark` Ubuntu:24.04:LTS	All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3	None known
`wireshark` Ubuntu:26.10	All versions, plus listed versions 4.6.4-14.6.6-14.6.6-24.6.6-2build1	None known
`wireshark` Ubuntu:26.04:LTS	All versions, plus listed versions 4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1	None known
`wireshark` openSUSE:Tumbleweed From an advisory covering 28 CVEs	before 4.6.8-2.1	4.6.8-2.1
`wireshark` openSUSE:Leap 16.0 From an advisory covering 28 CVEs	before 4.4.18-160000.1.1	4.4.18-160000.1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-76880 is a high vulnerability (CVSS 7.5) in Wireshark, published August 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in wireshark 4.4.18-0+deb13u1.

References

Show 145 moreShow less

This page doesn't list everything

Left out here: 1 version. The JSON record has them.