CVE-2026-15168

LowCVSS 2.5

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

The BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure.

An attacker could exploit this vulnerability to read sensitive data from Wireshark's process memory, potentially leading to information leakage.

It is recommended to immediately update Wireshark to version 4.6.7 or later (for the 4.6.x branch) and 4.4.17 or later (for the 4.4.x branch).

Original NVD description (English source)

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure