Every CVE Search/ Get API key

CVE-2026-76879

Stack-based Buffer Overflow in Wireshark

7.5 HighFix available

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.31%Unchanged since Aug 20, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Stack-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
CVE-2026-76879
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121
Updated
2026-11-02
EUVDEUVD-2026-63177 7.5

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
EUVD-2026-63177
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-wjf3-82r2-8vvm 7.5

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
GHSA-wjf3-82r2-8vvm
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121
Updated
2026-11-02
NVD 7.5

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
CVE-2026-76879
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121
Updated
2026-11-02
OSV 7.5

Stack-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
CVE-2026-76879
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2026-76879 7.5

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
DEBIAN-CVE-2026-76879
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVOESA-2026-3584 8.1

wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.

Security Fix(es):

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76879)

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76880)

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76881)

Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76882)

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76883)

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76884)

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76885)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76886)

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76887)

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76888)

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76889)

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76890)

Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76891)

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76917)

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76918)

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76919)

3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76920)

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76921)

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76922)

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76923)

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76924)

BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76926)

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76927)

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76928)

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76929)

Record
OESA-2026-3584
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:84721 8.1

Red Hat Security Advisory: wireshark security update

Record
RHSA-2026:84721
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:84721 8.1

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

  • wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)

  • wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)

  • wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)

  • wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879)

  • wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928)

  • wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)

  • wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)

  • wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-95389)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:84721
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-76879 7.5

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
UBUNTU-CVE-2026-76879
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:84721 No score

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

  • wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
  • wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
  • wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
  • wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879)
  • wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928)
  • wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
  • wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
  • wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-95389)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:84721
Updated
2026-11-02
OSVAZL-96809 No score

CVE-2026-76879 affecting package wireshark 4.4.7-2

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Record
AZL-96809
Updated
2026-11-05
OSVopenSUSE-SU-2026:11579-1 No score

libwireshark19-4.6.8-2.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11579-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22014-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

  • CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
  • CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
  • CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
  • CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
  • CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
  • CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
  • CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
  • CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
  • CVE-2026-76884: ERF file parser crash (bsc#1275834).
  • CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
  • CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
  • CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
  • CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
  • CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
  • CVE-2026-76890: Sharkd utility crash (bsc#1275841).
  • CVE-2026-76891: Sharkd utility crash (bsc#1275844).
  • CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
  • CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
  • CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
  • CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
  • CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
  • CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
  • CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
  • CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
  • CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
  • CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
  • CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
  • CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record
openSUSE-SU-2026:22014-1
Updated
2026-11-02
OSVSUSE-SU-2026:24013-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.4.18:

  • CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
  • CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
  • CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
  • CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
  • CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
  • CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
  • CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
  • CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
  • CVE-2026-76884: ERF file parser crash (bsc#1275834).
  • CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
  • CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
  • CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
  • CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
  • CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
  • CVE-2026-76890: Sharkd utility crash (bsc#1275841).
  • CVE-2026-76891: Sharkd utility crash (bsc#1275844).
  • CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
  • CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
  • CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
  • CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
  • CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
  • CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
  • CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
  • CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
  • CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
  • CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
  • CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
  • CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

Record
SUSE-SU-2026:24013-1
Updated
2026-11-02
OSVSUSE-SU-2026:4379-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

Update to Wireshark 4.6.8:

  • CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).
  • CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).
  • CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).
  • CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).
  • CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).
  • CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).
  • CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).
  • CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).
  • CVE-2026-76884: ERF file parser crash (bsc#1275834).
  • CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).
  • CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).
  • CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).
  • CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).
  • CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).
  • CVE-2026-76890: Sharkd utility crash (bsc#1275841).
  • CVE-2026-76891: Sharkd utility crash (bsc#1275844).
  • CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).
  • CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).
  • CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).
  • CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).
  • CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).
  • CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).
  • CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).
  • CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).
  • CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).
  • CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).
  • CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).
  • CVE-2026-76929: Pcapng file parser crash (bsc#1275854).

Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

Record
SUSE-SU-2026:4379-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wireshark
AlmaLinux:10
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark-cli
AlmaLinux:10
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark-devel
AlmaLinux:10
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark
Azure Linux:3
 through 4.4.7-2 None known
wireshark
Debian:12
 All versions, plus listed versions
4.0.10-14.0.11-14.0.11-1~deb12u14.0.17-0+deb12u14.0.17-0+deb12u2
Show 45 moreShow less
4.0.17-0+deb12u34.0.3-14.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-14.2.0-14.2.0-1~exp04.2.0~rc3-1~exp14.2.2-14.2.2-1.14.2.2-1.1~exp14.2.4-14.2.5-14.2.5-24.2.6-14.4.0-0exp14.4.0-0exp24.4.0-14.4.1-14.4.2-14.4.3-14.4.4-14.4.5-14.4.6-14.4.6-24.4.7-0exp14.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-14.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2
 None known
wireshark
Debian:13
 before 4.4.18-0+deb13u1, plus listed versions
4.4.13-0+deb13u14.4.14-0+deb13u14.4.15-0+deb13u14.4.16-0+deb13u14.4.7-14.4.8-0exp14.4.9-1
4.4.18-0+deb13u1
wireshark
Debian:14
 before 4.6.9-1, plus listed versions
4.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-1
Show 11 moreShow less
4.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-24.6.2-14.6.2-34.6.3-14.6.4-14.6.5-14.6.6-14.6.6-2
4.6.9-1
wireshark
openEuler:24.03-LTS-SP1
From an advisory covering 25 CVEs
 before 4.4.18-1.oe2403sp1
4.4.18-1.oe2403sp1
wireshark
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark-cli
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
Show 19 moreShow less
Affected packages
PackageAffectedFixed
wireshark-cli-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark
Rocky Linux:10
From an advisory covering 8 CVEs
 before 1:4.4.2-10.el10_2.8
1:4.4.2-10.el10_2.8
wireshark
SUSE:Linux Enterprise Server 16.0
From an advisory covering 28 CVEs
 before 4.4.18-160000.1.1
4.4.18-160000.1.1
wireshark
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 28 CVEs
 before 4.4.18-160000.1.1
4.4.18-160000.1.1
wireshark
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 28 CVEs
 before 4.6.8-150700.21.14.1
4.6.8-150700.21.14.1
wireshark
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 28 CVEs
 before 4.6.8-150700.21.14.1
4.6.8-150700.21.14.1
wireshark
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 9 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3
 None known
wireshark
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 8 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2
 None known
wireshark
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 7 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2
 None known
wireshark
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2
 None known
wireshark
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1
 None known
wireshark
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3
 None known
wireshark
Ubuntu:26.10
 All versions, plus listed versions
4.6.4-14.6.6-14.6.6-24.6.6-2build1
 None known
wireshark
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1
 None known
wireshark
openSUSE:Tumbleweed
From an advisory covering 28 CVEs
 before 4.6.8-2.1
4.6.8-2.1
wireshark
openSUSE:Leap 16.0
From an advisory covering 28 CVEs
 before 4.4.18-160000.1.1
4.4.18-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-76879 is a high vulnerability (CVSS 7.5) in Wireshark, published August 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in wireshark 4.4.18-0+deb13u1.

References

Show 138 moreShow less
This page doesn't list everything

Left out here: 1 version. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open