CVE-2026-95395: medium-severity vulnerability in Wireshark
Missing Release of Memory after Effective Lifetime in Wireshark
Published
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.1%
exploitation probability
0.1%top 97% of all CVEs
observed exploitation
nono source reports it
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Wireshark Foundation · WiresharkRelated CVEs — Wireshark
In the same product, most dangerous first.