PC
Product
PCRE2
19
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 8Medium 3Low 1
Watch
Add PCRE2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8786 | 9.8 | May 5 | pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular… Affected: 10.23 |
| CVE-2017-8399 | 9.8 | May 1 | PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many captures." Affected: before 10.30 |
| CVE-2015-3210 | 9.8 | Dec 13 | Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by… Affected: 10.10 |
| CVE-2016-3191 | 9.8 | Mar 17 | The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in… Affected: through 10.21 |
| CVE-2025-58050 | 9.1 | Aug 27 | PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS Affected: 10.45 |
| CVE-2022-1587 | 9.1 | May 16 | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file Affected: before 10.40 |
| CVE-2022-1586 | 9.1 | May 16 | An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file Affected: before 10.40 |
Showing 7
