[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-zvMht2fNuG8Xf-12XBRJ-iw5FN1ouYdU1B3eVUvLx0":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":43,"kevVulnerabilities":99,"topProductsByCves":100,"seoMetadata":106,"meta":115},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":42},23863,"pcre",5,58,0,117,"2025-08-27","p",[16,21,27,32,38],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},126116,91,34,"2020-06-15",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},126119,"perl_compatible_regular_expression_library",3,16,"2015-12-02",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":13},126117,"pcre2",18,11,{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},126118,"perl-compatible_regular_expression_library",4,1,"2007-11-07",{"id":39,"product_name":40,"version_count":36,"cve_count":11,"kev_count":11,"last_cve_update":41},126115,"libpcre",null,"Pcre is a technology vendor with 5 tracked products and 58 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[44,53,59,64,69,73,81,85,91,95],{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":51,"epssScore":52},"CVE-2015-3210","Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by \u002F^(?P=B)((?P=B)(?J:(?P\u003CB>c)(?P\u003CB>a(?P=B)))>WGXCREDITS)\u002F, a different vulnerability than CVE-2015-8384.","2016-12-13",9.8,"v3.1","Critical",false,0.09157,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":48,"cvssVersion":57,"severity":50,"isKev":51,"epssScore":58},"CVE-2016-3191","The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.","2016-03-17","v3.0",0.0843,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":51,"epssScore":63},"CVE-2016-1283","The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the \u002F((?:F?+(?:^(?(R)a+\\\"){99}-))(?J)(?'R'(?'R'\u003C((?'RR'(?'R'\\){97)?J)?J)(?'R'(?'R'\\){99|(:(?|(?'R')(\\k'R')|((?'R')))H'R'R)(H'R))))))\u002F pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.","2016-01-03",0.07791,{"cveId":65,"description":66,"publishedDate":47,"cvssScore":67,"cvssVersion":57,"severity":50,"isKev":51,"epssScore":68},"CVE-2015-5073","Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.",9.1,0.07673,{"cveId":70,"description":71,"publishedDate":26,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":51,"epssScore":72},"CVE-2015-8386","PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",0.0687,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":78,"severity":79,"isKev":51,"epssScore":80},"CVE-2008-2371","Heap-based buffer overflow in pcre_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches.","2008-07-07",7.5,"v2","High",0.06726,{"cveId":82,"description":83,"publishedDate":26,"cvssScore":77,"cvssVersion":78,"severity":79,"isKev":51,"epssScore":84},"CVE-2015-8388","PCRE before 8.38 mishandles the \u002F(?=di(?\u003C=(?1))|(?=(.))))\u002F pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",0.06587,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":9,"cvssVersion":78,"severity":89,"isKev":51,"epssScore":90},"CVE-2014-8964","Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.","2014-12-16","Medium",0.06505,{"cveId":92,"description":93,"publishedDate":26,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":51,"epssScore":94},"CVE-2015-8391","The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.",0.06404,{"cveId":96,"description":97,"publishedDate":47,"cvssScore":77,"cvssVersion":57,"severity":79,"isKev":51,"epssScore":98},"CVE-2015-3217","PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by \u002F^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$\u002F.",0.06169,[],[101,102,103,104,105],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":36,"cve_count":11,"kev_count":11,"last_cve_update":41},{"title":107,"metaDescription":108,"keywords":109,"structuredData":110},"Pcre - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Pcre covering 5 products with 58 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pcre vulnerabilities, Pcre security, Pcre CVE, Pcre threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":111,"@type":112,"name":113,"description":108,"url":114},"https:\u002F\u002Fschema.org","Organization","Pcre","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpcre",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":116,"apiVersion":117},"2026-10-18T20:37:51.002Z","3.0"]