Known vulnerabilities in PCRE2

Vendor: PCRE
Software: PCRE2
Software CPE: cpe:2.3:a:pcre:pcre2:*:*:*:*:*:*:*:*
Website: https://www.pcre.org/
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PCRE2 PCRE2 is affected by 16 known vulnerabilities: 4 high, 6 medium, 6 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152562 - Out-of-bounds write
CVE-2026-103111		 CWE-787 Low
No
No
 10.49 28.09.2026 SB20260928296
#VU146527 - Integer overflow
CVE-2026-89158		 CWE-190 Medium
No
No
 10.48 31.08.2026 SB20260831132
#VU146526 - Out-of-bounds read
CVE-2026-89160		 CWE-125 Low
No
No
 10.48 31.08.2026 SB20260831132
#VU146525 - Integer overflow
CVE-2026-89157		 CWE-190 Low
No
No
 10.48 31.08.2026 SB20260831132
#VU146524 - Heap-based Buffer Overflow
CVE-2026-86145		 CWE-122 High
No
No
 10.48 31.08.2026 SB20260831132
SB20260914120
SB20260914121
and 3 more
#VU146523 - Out-of-bounds read
CVE-2026-89156		 CWE-125 Low
No
No
 10.48 31.08.2026 SB20260831132
#VU146522 - Out-of-bounds read
 CWE-125 Low
No
No
 10.47 31.08.2026 SB20260831133
#VU146521 - Exposure of sensitive information to an unauthorized actor
CVE-2026-89162		 CWE-200 Low
No
No
 10.48 31.08.2026 SB20260831132
#VU116129 - Out-of-bounds read
CVE-2025-58050		 CWE-125 Medium
No
No
 10.46 26.09.2025 SB2025092615
SB2025092617
SB2025101331
and 3 more
#VU79112 - Integer overflow
CVE-2022-41409		 CWE-190 Medium
No
No
 10.41 07.08.2023 SB2023080749
SB2023080750
SB2023081617
and 10 more
#VU65555 - Heap-based Buffer Overflow
CVE-2015-8381		 CWE-122 High
No
No
 10.20 20.07.2022 SB2015120208
SB2024032815
SB2024040818
and 11 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 10.40 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 10.40 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more
#VU29116 - Out-of-bounds read
CVE-2019-20454		 CWE-125 Medium
No
No
 10.34 17.06.2020 SB2020021421
SB2020061707
SB2020110528
and 14 more
#VU39076 - Heap-based Buffer Overflow
CVE-2017-8786		 CWE-122 High
No
No
 - 05.05.2017 SB2017050513
SB2017100809
SB2017110113
and 1 more
#VU31422 - Memory corruption
CVE-2017-8399		 CWE-119 High
No
No
 10.30 01.05.2017 SB2017050106
SB2017100809