PC
Product
PCRE2
by PCRE · last CVE Sep 30, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 8Medium 3Low 1
Watch

Add PCRE2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-8786
9.8
4%
May 5
pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular…
Affected: 10.23
CVE-2017-8399
9.8
3%
May 1
PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures."
Affected: before 10.30
CVE-2015-3210
9.8
9%
Dec 13
Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by…
Affected: 10.10
CVE-2016-3191
9.8
8%
Mar 17
The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in…
Affected: through 10.21
CVE-2025-58050
9.1
1%
Aug 27
PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS
Affected: 10.45
CVE-2022-1587
9.1
3%
May 16
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file
Affected: before 10.40
CVE-2022-1586
9.1
3%
May 16
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file
Affected: before 10.40
Showing 7