Overview 1,467 matches · 0 in Waratek scope · 0 protected · 14 exploited · 4 CISA KEV · 113 public PoC · 10 EPSS ≥ 0.5
1,467matches
0in Waratek scope0.0%
0protected0.0%
14exploited1.0%
4CISA KEV0.3%
113public PoC7.7%
10EPSS ≥ 0.50.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
1,467
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,467
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 155 / year
19991
Not applicable1
Low1
not blocked1
No public exploit1
20000
20011
Not applicable1
Medium1
not blocked1
No public exploit1
20021
Not applicable1
Low1
not blocked1
No public exploit1
20035
Not applicable5
High2
Medium3
not blocked5
Working exploit published2
No public exploit3
20049
Not applicable9
High5
Medium4
not blocked9
Working exploit published2
No public exploit7
200514
Not applicable14
High8
Medium5
Low1
not blocked14
Working exploit published2
No public exploit12
200640
Not applicable40
High14
Medium25
Low1
not blocked40
Working exploit published9
No public exploit31
200751
Not applicable51
High20
Medium28
Low3
not blocked51
Working exploit published5
No public exploit46
200827
Not applicable27
High3
Medium22
Low2
not blocked27
Working exploit published5
No public exploit22
200935
Not applicable35
High14
Medium20
Low1
not blocked35
Working exploit published5
No public exploit30
201037
Not applicable37
High22
Medium11
Low4
not blocked37
Working exploit published4
No public exploit33
201133
Not applicable33
High7
Medium25
Low1
not blocked33
Working exploit published8
No public exploit25
201260
Not applicable60
High8
Medium29
Low23
not blocked60
Working exploit published13
No public exploit47
2013102
Not applicable102
High10
Medium64
Low28
not blocked102
Working exploit published1
No public exploit101
201450
Not applicable50
High15
Medium35
not blocked50
Exploited1
Working exploit published6
No public exploit43
201559
Not applicable59
Critical2
High10
Medium46
Low1
not blocked59
Working exploit published3
No public exploit56
2016116
Not applicable116
Critical3
High12
Medium101
not blocked116
Working exploit published20
No public exploit96
201783
Not applicable83
Critical5
High69
Medium9
not blocked83
Exploited6
Working exploit published6
No public exploit71
2018118
Not applicable118
Critical8
High90
Medium19
Low1
not blocked118
Exploited1
Working exploit published2
No public exploit115
201957
Not applicable57
Critical5
High33
Medium19
not blocked57
Exploited2
Working exploit published1
No public exploit54
202058
Not applicable58
Critical10
High32
Medium16
not blocked58
Working exploit published3
No public exploit55
2021140
Not applicable140
Critical14
High93
Medium31
Low2
not blocked140
Exploited1
Working exploit published1
No public exploit138
202276
Not applicable76
Critical6
High25
Medium44
Low1
not blocked76
Working exploit published1
Proof of concept only4
No public exploit71
202362
Not applicable62
Critical6
High19
Medium37
not blocked62
Exploited1
Proof of concept only17
No public exploit44
202449
Not applicable49
Critical3
High27
Medium19
not blocked49
Proof of concept only15
No public exploit34
202528
Not applicable28
Critical2
High17
Medium9
not blocked28
Exploited1
Proof of concept only1
No public exploit26
2026155
Not applicable155
Critical2
High60
Medium92
Low1
not blocked155
Exploited1
Proof of concept only62
No public exploit92
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-25267 | High | 2026-10-06 | Not applicable | No public exploit | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
| CVE-2026-25263 | Medium | 2026-10-06 | Not applicable | No public exploit | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
| CVE-2026-96423 | High | 2026-09-29 | Not applicable | No public exploit | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96422 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96421 | Medium | 2026-09-29 | Not applicable | Proof of concept only | USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96420 | Medium | 2026-09-29 | Not applicable | No public exploit | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96419 | High | 2026-09-29 | Not applicable | Proof of concept only | Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution |
| CVE-2026-96418 | Medium | 2026-09-29 | Not applicable | Proof of concept only | TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96417 | Medium | 2026-09-29 | Not applicable | No public exploit | RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96416 | Medium | 2026-09-29 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96415 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95395 | Medium | 2026-09-29 | Not applicable | Proof of concept only | IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95394 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95393 | Medium | 2026-09-29 | Not applicable | Proof of concept only | CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95392 | Medium | 2026-09-29 | Not applicable | Proof of concept only | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95391 | Medium | 2026-09-29 | Not applicable | No public exploit | ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95390 | Medium | 2026-09-29 | Not applicable | Proof of concept only | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95389 | High | 2026-09-29 | Not applicable | Proof of concept only | SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95388 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95387 | High | 2026-09-29 | Not applicable | Proof of concept only | SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95386 | Medium | 2026-09-29 | Not applicable | Proof of concept only | TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-25275 | High | 2026-09-17 | Not applicable | No public exploit | Transient DOS when processing authentication frames with invalid FILS information element header lengths. |
| CVE-2026-76929 | Medium | 2026-08-19 | Not applicable | No public exploit | Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76928 | High | 2026-08-19 | Not applicable | No public exploit | X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76927 | High | 2026-08-19 | Not applicable | No public exploit | H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76926 | Medium | 2026-08-19 | Not applicable | No public exploit | BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76924 | Medium | 2026-08-19 | Not applicable | No public exploit | Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76923 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76922 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76921 | Medium | 2026-08-19 | Not applicable | No public exploit | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76920 | Medium | 2026-08-19 | Not applicable | No public exploit | 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76919 | High | 2026-08-19 | Not applicable | No public exploit | ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76918 | Medium | 2026-08-19 | Not applicable | No public exploit | SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76917 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76891 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76890 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76889 | Medium | 2026-08-19 | Not applicable | No public exploit | UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76888 | High | 2026-08-19 | Not applicable | Proof of concept only | RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76887 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76886 | Critical | 2026-08-19 | Not applicable | Proof of concept only | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76885 | Medium | 2026-08-19 | Not applicable | No public exploit | Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76884 | Medium | 2026-08-19 | Not applicable | Proof of concept only | ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76883 | Medium | 2026-08-19 | Not applicable | Proof of concept only | Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76882 | Medium | 2026-08-19 | Not applicable | Proof of concept only | Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76881 | Medium | 2026-08-19 | Not applicable | Proof of concept only | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76880 | High | 2026-08-19 | Not applicable | No public exploit | RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76879 | High | 2026-08-19 | Not applicable | No public exploit | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-19696 | Medium | 2026-08-13 | Not applicable | Proof of concept only | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows |
| CVE-2026-19695 | Medium | 2026-08-13 | Not applicable | Proof of concept only | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-19694 | Medium | 2026-08-13 | Not applicable | Proof of concept only | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-24911 | High | 2026-08-11 | Not applicable | No public exploit | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-24099 | Medium | 2026-08-11 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-22887 | High | 2026-08-11 | Not applicable | No public exploit | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-20891 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20890 | High | 2026-08-11 | Not applicable | No public exploit | Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (high) impacts. |
| CVE-2026-20886 | Medium | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20878 | High | 2026-08-11 | Not applicable | No public exploit | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20795 | High | 2026-08-11 | Not applicable | No public exploit | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20789 | High | 2026-08-11 | Not applicable | No public exploit | Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20787 | High | 2026-08-11 | Not applicable | No public exploit | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20780 | Medium | 2026-08-11 | Not applicable | No public exploit | Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20778 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-20776 | High | 2026-08-11 | Not applicable | No public exploit | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-20752 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-20749 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (low) impacts. |
| CVE-2026-20747 | High | 2026-08-11 | Not applicable | No public exploit | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-20745 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20741 | High | 2026-08-11 | Not applicable | No public exploit | Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (low) and availability (high) impacts. |
| CVE-2026-20739 | High | 2026-08-11 | Not applicable | No public exploit | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20737 | Medium | 2026-08-11 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20727 | High | 2026-08-11 | Not applicable | No public exploit | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (high) impacts. |
| CVE-2026-24084 | High | 2026-08-04 | Not applicable | No public exploit | Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. |
| CVE-2026-24078 | Medium | 2026-08-04 | Not applicable | No public exploit | Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
| CVE-2026-15174 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15173 | Medium | 2026-07-08 | Not applicable | Proof of concept only | pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15172 | Medium | 2026-07-08 | Not applicable | No public exploit | FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15171 | Medium | 2026-07-08 | Not applicable | Proof of concept only | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15170 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15169 | High | 2026-07-08 | Not applicable | Proof of concept only | UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15168 | Low | 2026-07-08 | Not applicable | Proof of concept only | BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure |
| CVE-2026-15167 | High | 2026-07-08 | Not applicable | No public exploit | DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15166 | Medium | 2026-07-08 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15165 | Medium | 2026-07-08 | Not applicable | Proof of concept only | TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15164 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15163 | High | 2026-07-08 | Not applicable | No public exploit | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service |
| CVE-2026-25268 | High | 2026-07-06 | Not applicable | No public exploit | Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations. |
| CVE-2026-24091 | High | 2026-06-01 | Not applicable | No public exploit | Memory corruption while processing fastboot commands with improperly formatted input. |
| CVE-2026-24085 | High | 2026-06-01 | Not applicable | No public exploit | Memory Corruption when processing display command line information due to improper initialization of a variable. |
| CVE-2025-59610 | Medium | 2026-06-01 | Not applicable | No public exploit | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
| CVE-2025-59609 | Medium | 2026-06-01 | Not applicable | No public exploit | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
| CVE-2026-9759 | Medium | 2026-05-27 | Not applicable | No public exploit | ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service |
| CVE-2025-27853 | High | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU web site only performs authentication with the client within the client's browser. The WebSockets used to communicate with the WDU server do not enforce any authentication. An attacker may bypass all authentication mechanisms by directly utilizing the remote APIs available on the websocket. |
| CVE-2025-27852 | Medium | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. This allows an attacker on the local network segment to execute arbitrary JavaScript code within the context of the WDU webpage. Full administrator level access to the device is possible. To initiate an exploit of this vulnerability, the victim must execute two actions: (1) view a specific URL served by the WDU, and (2) click an element on the rendered page. |
| CVE-2025-27851 | Critical | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate an exploit of this vulnerability, the victim must (1) be utilizing a web browser on a multihomed host that has local interfaces on the Garmin Marine Network as well as another network, and (2) access a malicious third party website created by the attacker. |
| CVE-2025-27850 | High | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious graphics package containing symlinks is uploaded, the web server follows the supplied links when serving content. No mechanisms to restrict those link targets to a specific area of the filesystem is enabled. This allows an attacker to retrieve arbitrary files from the device. |
| CVE-2026-43901 | Medium | 2026-05-11 | Not applicable | Proof of concept only | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination. |
| CVE-2025-47404 | High | 2026-05-04 | Not applicable | No public exploit | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified. |
| CVE-2026-6525 | Medium | 2026-05-02 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-5656 | High | 2026-05-01 | Not applicable | No public exploit | Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-5405 | High | 2026-05-01 | Not applicable | No public exploit | RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |