Overview 1,482 matches · 13 in Waratek scope · 1 protected · 15 exploited · 5 CISA KEV · 116 public PoC · 12 EPSS ≥ 0.5
1,482matches
13in Waratek scope0.9%
1protected0.1%
15exploited1.0%
5CISA KEV0.3%
116public PoC7.8%
12EPSS ≥ 0.50.8%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
11
0.7%
Outside Waratek scope
2
0.1%
Not applicable
1,467
99.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,481
99.9%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 158 / year
19991
Not applicable1
Low1
not blocked1
No public exploit1
20000
20011
Not applicable1
Medium1
not blocked1
No public exploit1
20021
Not applicable1
Low1
not blocked1
No public exploit1
20035
Not applicable5
High2
Medium3
not blocked5
Working exploit published2
No public exploit3
20049
Not applicable9
High5
Medium4
not blocked9
Working exploit published2
No public exploit7
200515
Outside Waratek scope1
Not applicable14
High8
Medium6
Low1
not blocked15
Working exploit published3
No public exploit12
200640
Not applicable40
High14
Medium25
Low1
not blocked40
Working exploit published9
No public exploit31
200751
Not applicable51
High20
Medium28
Low3
not blocked51
Working exploit published5
No public exploit46
200827
Not applicable27
High3
Medium22
Low2
not blocked27
Working exploit published5
No public exploit22
200935
Not applicable35
High14
Medium20
Low1
not blocked35
Working exploit published5
No public exploit30
201037
Not applicable37
High22
Medium11
Low4
not blocked37
Working exploit published4
No public exploit33
201133
Not applicable33
High7
Medium25
Low1
not blocked33
Working exploit published8
No public exploit25
201260
Not applicable60
High8
Medium29
Low23
not blocked60
Working exploit published13
No public exploit47
2013102
Not applicable102
High10
Medium64
Low28
not blocked102
Working exploit published1
No public exploit101
201450
Not applicable50
High15
Medium35
not blocked50
Exploited1
Working exploit published6
No public exploit43
201559
Not applicable59
Critical2
High10
Medium46
Low1
not blocked59
Working exploit published3
No public exploit56
2016117
Outside Waratek scope1
Not applicable116
Critical3
High13
Medium101
not blocked117
Working exploit published20
No public exploit97
201783
Not applicable83
Critical5
High69
Medium9
not blocked83
Exploited6
Working exploit published6
No public exploit71
2018119
No exploit published1
Not applicable118
Critical8
High90
Medium19
Low2
not blocked119
Exploited1
Working exploit published2
No public exploit116
201957
Not applicable57
Critical5
High33
Medium19
not blocked57
Exploited2
Working exploit published1
No public exploit54
202058
Not applicable58
Critical10
High32
Medium16
not blocked58
Working exploit published3
No public exploit55
2021142
No exploit published2
Not applicable140
Critical14
High95
Medium31
Low2
not blocked142
Exploited1
Working exploit published1
No public exploit140
202277
No exploit published1
Not applicable76
Critical7
High25
Medium44
Low1
not blocked77
Working exploit published1
Proof of concept only4
No public exploit72
202365
Protected by Waratek1
No exploit published2
Not applicable62
Critical7
High19
Medium39
blocked by ARMR today1
not blocked64
Exploited2
Proof of concept only17
No public exploit46
202449
Not applicable49
Critical3
High27
Medium19
not blocked49
Proof of concept only15
No public exploit34
202531
Mitigation candidate1
No exploit published2
Not applicable28
Critical2
High17
Medium12
not blocked31
Exploited1
Working exploit published1
Proof of concept only1
No public exploit28
2026158
No exploit published3
Not applicable155
Critical2
High62
Medium92
Low2
not blocked158
Exploited1
Proof of concept only64
No public exploit93
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-25267 | High | 2026-10-06 | Not applicable | No public exploit | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
| CVE-2026-25263 | Medium | 2026-10-06 | Not applicable | No public exploit | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
| CVE-2026-96423 | High | 2026-09-29 | Not applicable | No public exploit | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96422 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96421 | Medium | 2026-09-29 | Not applicable | Proof of concept only | USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96420 | Medium | 2026-09-29 | Not applicable | No public exploit | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96419 | High | 2026-09-29 | Not applicable | Proof of concept only | Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution |
| CVE-2026-96418 | Medium | 2026-09-29 | Not applicable | Proof of concept only | TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96417 | Medium | 2026-09-29 | Not applicable | No public exploit | RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96416 | Medium | 2026-09-29 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96415 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95395 | Medium | 2026-09-29 | Not applicable | Proof of concept only | IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95394 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95393 | Medium | 2026-09-29 | Not applicable | Proof of concept only | CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95392 | Medium | 2026-09-29 | Not applicable | Proof of concept only | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95391 | Medium | 2026-09-29 | Not applicable | No public exploit | ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95390 | Medium | 2026-09-29 | Not applicable | Proof of concept only | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95389 | High | 2026-09-29 | Not applicable | Proof of concept only | SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95388 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95387 | High | 2026-09-29 | Not applicable | Proof of concept only | SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95386 | Medium | 2026-09-29 | Not applicable | Proof of concept only | TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-25275 | High | 2026-09-17 | Not applicable | No public exploit | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| CVE-2026-63126 | High | 2026-09-16 | No exploit published | Proof of concept only | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or allocations. In Kotlin, ProtoAdapter.decode(ByteArray) and ProtoAdapter.decode(ByteString) use ByteArrayProtoReader32.internalNextLengthDelimited(), where a positive oversized length can wrap pos + length to a negative limit and escape the existing negative-length check. Related ProtoReader, ReadBuffer.readVarint(), ReadBuffer.verifyAdditional(count:), packed-repeated, nested-message, and ProtoDecoder.decodeSizeDelimited(_:from:) paths can cross logical boundaries, perform pointer arithmetic, reserve capacity, or convert an unrepresentable size before proving the requested bytes exist. An attacker who supplies malformed protobuf bytes can cause unchecked exceptions, traps, out-of-bounds behavior, or excessive allocation, resulting in denial of service without known confidentiality, integrity, or code-execution impact. This issue is fixed in versions 6.4.5 and 7.0.0-alpha04. |
| CVE-2026-76929 | Medium | 2026-08-19 | Not applicable | No public exploit | Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76928 | High | 2026-08-19 | Not applicable | No public exploit | X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76927 | High | 2026-08-19 | Not applicable | No public exploit | H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76926 | Medium | 2026-08-19 | Not applicable | No public exploit | BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76924 | Medium | 2026-08-19 | Not applicable | No public exploit | Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76923 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76922 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76921 | Medium | 2026-08-19 | Not applicable | No public exploit | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76920 | Medium | 2026-08-19 | Not applicable | No public exploit | 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76919 | High | 2026-08-19 | Not applicable | No public exploit | ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76918 | Medium | 2026-08-19 | Not applicable | No public exploit | SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76917 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76891 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76890 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76889 | Medium | 2026-08-19 | Not applicable | No public exploit | UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76888 | High | 2026-08-19 | Not applicable | Proof of concept only | RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76887 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76886 | Critical | 2026-08-19 | Not applicable | Proof of concept only | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76885 | Medium | 2026-08-19 | Not applicable | No public exploit | Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76884 | Medium | 2026-08-19 | Not applicable | Proof of concept only | ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76883 | Medium | 2026-08-19 | Not applicable | Proof of concept only | Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76882 | Medium | 2026-08-19 | Not applicable | Proof of concept only | Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76881 | Medium | 2026-08-19 | Not applicable | Proof of concept only | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76880 | High | 2026-08-19 | Not applicable | No public exploit | RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76879 | High | 2026-08-19 | Not applicable | No public exploit | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-19696 | Medium | 2026-08-13 | Not applicable | Proof of concept only | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows |
| CVE-2026-19695 | Medium | 2026-08-13 | Not applicable | Proof of concept only | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-19694 | Medium | 2026-08-13 | Not applicable | Proof of concept only | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-24911 | High | 2026-08-11 | Not applicable | No public exploit | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-24099 | Medium | 2026-08-11 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-22887 | High | 2026-08-11 | Not applicable | No public exploit | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-20891 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20890 | High | 2026-08-11 | Not applicable | No public exploit | Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (high) impacts. |
| CVE-2026-20886 | Medium | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20878 | High | 2026-08-11 | Not applicable | No public exploit | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20795 | High | 2026-08-11 | Not applicable | No public exploit | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20789 | High | 2026-08-11 | Not applicable | No public exploit | Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20787 | High | 2026-08-11 | Not applicable | No public exploit | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20780 | Medium | 2026-08-11 | Not applicable | No public exploit | Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20778 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-20776 | High | 2026-08-11 | Not applicable | No public exploit | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-20752 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-20749 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (low) impacts. |
| CVE-2026-20747 | High | 2026-08-11 | Not applicable | No public exploit | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-20745 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20741 | High | 2026-08-11 | Not applicable | No public exploit | Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (low) and availability (high) impacts. |
| CVE-2026-20739 | High | 2026-08-11 | Not applicable | No public exploit | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20737 | Medium | 2026-08-11 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20727 | High | 2026-08-11 | Not applicable | No public exploit | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-24084 | High | 2026-08-04 | Not applicable | No public exploit | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| CVE-2026-24078 | Medium | 2026-08-04 | Not applicable | No public exploit | Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
| CVE-2026-45799 | High | 2026-07-17 | No exploit published | Proof of concept only | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() in wire-runtime do not validate that a LENGTH_DELIMITED field length is non-negative before skip(), allowing a crafted protobuf varint encoding -128 as a signed Int to make skip(-128) move the internal position negative and make the next readByte() throw ArrayIndexOutOfBoundsException instead of the documented IOException or ProtocolException, which can crash services using ProtoAdapter.decode(byte[]) on untrusted payloads. This issue is fixed in versions 6.3.0 and 7.0.0-alpha03. |
| CVE-2026-15174 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15173 | Medium | 2026-07-08 | Not applicable | Proof of concept only | pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15172 | Medium | 2026-07-08 | Not applicable | No public exploit | FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15171 | Medium | 2026-07-08 | Not applicable | Proof of concept only | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15170 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15169 | High | 2026-07-08 | Not applicable | Proof of concept only | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15168 | Low | 2026-07-08 | Not applicable | Proof of concept only | BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure |
| CVE-2026-15167 | High | 2026-07-08 | Not applicable | No public exploit | DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15166 | Medium | 2026-07-08 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15165 | Medium | 2026-07-08 | Not applicable | Proof of concept only | TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15164 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15163 | High | 2026-07-08 | Not applicable | No public exploit | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service |
| CVE-2026-25268 | High | 2026-07-06 | Not applicable | No public exploit | Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. |
| CVE-2026-24091 | High | 2026-06-01 | Not applicable | No public exploit | Memory corruption while processing fastboot commands with improperly formatted input. |
| CVE-2026-24085 | High | 2026-06-01 | Not applicable | No public exploit | Memory Corruption when processing display command line information due to improper initialization of a variable. |
| CVE-2025-59610 | Medium | 2026-06-01 | Not applicable | No public exploit | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
| CVE-2025-59609 | Medium | 2026-06-01 | Not applicable | No public exploit | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
| CVE-2026-9759 | Medium | 2026-05-27 | Not applicable | No public exploit | ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service |
| CVE-2025-27853 | High | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU web site only performs authentication with the client within the client's browser. The WebSockets used to communicate with the WDU server do not enforce any authentication. An attacker may bypass all authentication mechanisms by directly utilizing the remote APIs available on the websocket. |
| CVE-2025-27852 | Medium | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. This allows an attacker on the local network segment to execute arbitrary JavaScript code within the context of the WDU webpage. Full administrator level access to the device is possible. To initiate an exploit of this vulnerability, the victim must execute two actions: (1) view a specific URL served by the WDU, and (2) click an element on the rendered page. |
| CVE-2025-27851 | Critical | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate an exploit of this vulnerability, the victim must (1) be utilizing a web browser on a multihomed host that has local interfaces on the Garmin Marine Network as well as another network, and (2) access a malicious third party website created by the attacker. |
| CVE-2025-27850 | High | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious graphics package containing symlinks is uploaded, the web server follows the supplied links when serving content. No mechanisms to restrict those link targets to a specific area of the filesystem is enabled. This allows an attacker to retrieve arbitrary files from the device. |
| CVE-2026-43901 | Medium | 2026-05-11 | Not applicable | Proof of concept only | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination. |
| CVE-2025-47404 | High | 2026-05-04 | Not applicable | No public exploit | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2026-6525 | Medium | 2026-05-02 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |