On May 11, 2026, CVE-2026-5172 was published as a dnsmasq vulnerability in which malformed DNS responses can trigger a heap out-of-bounds read and crash the service, reducing availability without necessarily causing a complete, sustained denial of service. That wording matters because it places...
CVE-2026-2291 is a May 2026 dnsmasq vulnerability in the extract_name() DNS parsing code that can enable cache poisoning or denial of service in affected Linux and embedded resolver deployments, with Microsoft’s Security Update Guide carrying the record rather than shipping a Windows patch. That...