CVE-2026-89162

Katalog CVE

CVSS 3.3 · Low EPSS 0,16%

Kerentanan Incorrect Resource Transfer Between Spheres pada pcre2. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

Rincian

Terbit di NVD

11 September 2026

Terakhir diubah

16 September 2026

Status NVD

Undergoing Analysis

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-669: Incorrect Resource Transfer Between Spheres

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q7rw-r7qq-2hx6 exploit · advisory vendor
• https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 release notes