Vendor

PCRE

65 known vulnerabilities in products by PCRE, 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in PCRE

Critical	CVE-2015-3210	PCRE: Heap-Based Buffer Overflow	9.8	13.12.2016
Critical	CVE-2016-3191	PCRE: Stack-Based Buffer Overflow	9.8	17.03.2016
Critical	CVE-2016-1283	PCRE: Heap-Based Buffer Overflow also in 3 other products	9.8	03.01.2016
Critical	CVE-2015-8386	PHP: Buffer Overflow also in 3 other products	9.8	02.12.2015
Critical	CVE-2015-8391	PCRE: Denial of Service also in 9 other products	9.8	02.12.2015
Critical	CVE-2015-8383	PHP: Buffer Overflow also in 2 other products	9.8	02.12.2015
Critical	CVE-2015-5073	PCRE: Heap-Based Buffer Overflow also in 1 other product	9.1	13.12.2016
Critical	CVE-2015-8394	PHP: Integer Overflow also in 1 other product	9.8	02.12.2015
Critical	CVE-2015-8390	PHP: Use of Uninitialized Memory also in 2 other products	9.8	02.12.2015
Critical	CVE-2017-8786	PCRE2: Heap-Based Buffer Overflow	9.8	05.05.2017
Critical	CVE-2015-8389	PHP: Denial of Service also in 2 other products	9.8	02.12.2015
Critical	CVE-2017-8399	PCRE2: Stack-Based Buffer Overflow	9.8	01.05.2017
Critical	CVE-2022-1586	Pcre2: Out-of-bounds Read also in 13 other products	9.1	16.05.2022
High	CVE-2015-3217	PCRE: Stack-Based Buffer Overflow also in 1 other product	7.5	13.12.2016
Critical	CVE-2022-1587	Pcre2: Out-of-bounds Read also in 12 other products	9.1	16.05.2022
High	CVE-2017-7186	PCRE: Denial of Service	7.5	20.03.2017
High	CVE-2017-6004	PCRE: Out-of-Bounds Read	7.5	16.02.2017
High	CVE-2015-8393	PHP: Information Disclosure also in 2 other products	7.5	02.12.2015
High	CVE-2015-8387	PHP: Integer Overflow also in 2 other products	7.3	02.12.2015
High	CVE-2017-11164	PCRE: security vulnerability	7.5	11.07.2017
High	CVE-2017-7246	PCRE: Stack-Based Buffer Overflow	7.8	23.03.2017
High	CVE-2019-20838	PCRE: Buffer Over-read also in 2 other products	7.5	15.06.2020
High	CVE-2017-7245	PCRE: Stack-Based Buffer Overflow	7.8	23.03.2017
Medium	CVE-2020-14155	PCRE: Integer Overflow also in 14 other products	5.3	15.06.2020
High	CVE-2014-9769	PCRE: Memory Corruption	7.3	28.03.2016

All vulnerabilities in search

News

Oracle’s first monthly patch release fixes 35 flaws, including 11 rated ‘critical’csoonline, 01.06.2026

Products

Products by PCRE

PCRE	33	0
PCRE2	19	0
PCRE Perl-Compatible Regular Expression Library	17	0

Key figures

Vulnerabilities

News

Products