PC
Product
PCRE2
by PCRE · last CVE Sep 30, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 8Medium 3Low 1
Watch

Add PCRE2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-89160
6.5
0%
Sep 11
PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject
Affected: 10.34 before 10.48
CVE-2026-89158
6.5
0%
Sep 11
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write
Affected: before 10.48
CVE-2026-89156
5.9
0%
Sep 11
PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data
Affected: 10.34 before 10.48
Showing 3