Lucene search
+L

10 matches found

osv_mgasa
osv_mgasa
•added 2026/10/09 5:00 p.m.•14 views

MGASA-2026-0478 Updated mingw-pcre2 & pcre2 packages fix security vulnerabilities

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.2CVSS7.3AI score0.00394EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

TencentOS Server 4: pcre2 (TSSA-2026:1052)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1052 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

8.2CVSS6.1AI score0.00394EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2026/09/14 4:34 p.m.•20 views

OESA-2026-3815 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

8.2CVSS5.9AI score0.00394EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/10 1:48 a.m.•13 views

SUSE CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.2CVSS6AI score0.00394EPSS
SaveExploits0References9
osv_alpine
osv_alpine
•added 2026/09/05 6:17 a.m.•12 views

ALPINE-CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.2CVSS6AI score0.00394EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/05 5:09 a.m.•7 views

CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.8CVSS6AI score0.00394EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/05 5:09 a.m.•77 views

CVE-2026-86145

PCRE2 versions before 10.48 are affected by an out-of-bounds write in pcre2_dfa_match . The root cause is that reuse of a cached workspace block in a recursive DFA matching workspace lacks a size check, whereas newly allocated blocks for the same purpose do include one. Exploitation requires eith...

8.2CVSS6AI score0.00394EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/09/05 5:09 a.m.•20 views

CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.2CVSS6AI score0.00394EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/05 12:00 a.m.•7 views

CVE-2026-86145: Improper Protection of Alternate Path

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.2CVSS6AI score0.00394EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/05 12:00 a.m.•8 views

CVE-2026-86145: Improper Protection of Alternate Path

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...

8.2CVSS6AI score0.00394EPSS
SaveExploits0References2
Rows per page
Query Builder