UBUNTU-CVE-2026-89162: Low severity ubuntu/pcre2 vulnerability
Published Sep 11, 2026
·Updated
In PCRE2 before 10.48, pcre2serializeencode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.
Affected Software
2 affected components
ubuntu/pcre2*
ubuntu/pcre2*
Event History
Sep 11, 2026
CVE Published
via OSV·05:16 AM
Data Sourced
via OSV·05:16 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vector indicates local access and no privileges or user interaction are required. Exploitation also has high attack complexity, and the disclosure is described as typically occurring where the adversary's existing access is already unsafe.
2
What information could be exposed?
The issue may disclose two bytes through pcre2_serialize_encode. It affects confidentiality only; no integrity or availability impact is indicated.
3
Which versions are affected?
PCRE2 versions before 10.48 are affected. The provided data does not identify Ubuntu package versions or fixed Ubuntu releases.