Open Source PCRE (Perl Compatible Regular Expressions)

Name: Open Source PCRE (Perl Compatible Regular Expressions)
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

7critical15high4medium1low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3191US	critical9.8	8.43% (95th)	—	8.39	2016-03-17	< 8.39
CVE-2015-8386US	critical9.8	6.87% (94th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8388US	high7.5	6.59% (94th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8391US	critical9.8	6.40% (94th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8383US	critical9.8	6.08% (93rd)	—	8.38	2015-12-02	< 8.38
CVE-2015-8385US	high7.5	5.62% (93rd)	—	8.38	2015-12-02	< 8.38
CVE-2015-8381US	high7.5	5.29% (93rd)	—	8.38	2015-12-02	< 8.38
CVE-2015-2328US	high7.5	5.24% (92nd)	—	8.38	2015-12-02	< 8.38
CVE-2015-8394US	critical9.8	4.81% (92nd)	—	8.38	2015-12-02	< 8.38
CVE-2015-8390US	critical9.8	4.66% (92nd)	—	8.38	2015-12-02	< 8.38
CVE-2015-8380US	high7.5	4.44% (91st)	—	8.38	2015-12-02	< 8.38
CVE-2015-8393US	high7.5	4.37% (91st)	—	8.38	2015-12-02	< 8.38
CVE-2015-2327US	high7.5	4.05% (91st)	—	8.38	2015-12-02	< 8.38
CVE-2015-8382US	medium6.4	3.96% (90th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8389US	critical9.8	3.89% (90th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8387US	high7.3	3.64% (90th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8392US	high7.5	3.56% (89th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8395US	high7.5	3.54% (89th)	—	8.38	2015-12-02	< 8.38
CVE-2015-8384US	high7.5	3.40% (89th)	—	8.38	2015-12-02	< 8.38
CVE-2019-20454US	high7.5	1.56% (75th)	—	10.34	2020-02-14	< 10.34
CVE-2022-41409US	high7.5	1.12% (66th)	—	10.42	2023-07-18	< 10.42
CVE-2026-86145US	—	0.43% (37th)	—	no fix	2026-09-05	≤ 2 <10.48
CVE-2026-89157US	high7.4	0.35% (28th)	—	no fix	2026-09-11	≤ 2 <10.48
CVE-2026-89156US	medium5.9	0.29% (22nd)	—	no fix	2026-09-11	≤ 2 <10.48
CVE-2026-103111US	—	0.27% (19th)	—	10.49	2026-09-30	< 10.49
CVE-2026-89160US	medium6.5	0.27% (19th)	—	no fix	2026-09-11	≤ 2 <10.48
CVE-2026-89158US	medium6.5	0.25% (16th)	—	no fix	2026-09-11	≤ 2 <10.48
CVE-2026-89162US	low3.3	0.16% (5th)	—	no fix	2026-09-11	≤ 2 <10.48
CVE-2026-89161US	high7.8	0.13% (2nd)	—	no fix	2026-09-11	≤ 2 <10.48

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer14 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-185Incorrect Regular Expression2 CVEs
CWE-19CWE-191 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-407Inefficient Algorithmic Complexity1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan