dnsmasq vulnerability

  1. CVE-2026-5172 dnsmasq Heap Crash: Windows Teams Should Patch DNS Dependencies

    On May 11, 2026, CVE-2026-5172 was published as a dnsmasq vulnerability in which malformed DNS responses can trigger a heap out-of-bounds read and crash the service, reducing availability without necessarily causing a complete, sustained denial of service. That wording matters because it places...
  2. CVE-2026-2291 dnsmasq DNS Parsing Bug: Patch Focus for Windows-Hybrid Environments

    CVE-2026-2291 is a May 2026 dnsmasq vulnerability in the extract_name() DNS parsing code that can enable cache poisoning or denial of service in affected Linux and embedded resolver deployments, with Microsoft’s Security Update Guide carrying the record rather than shipping a Windows patch. That...