CVE-2026-41637

Vendor

Microsoft

Product

dnsmasq / Unbound / PowerDNS

CVSS

3.7

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 14
   Advisory MSRC 23 Jul 2026

   CVE-2026-41637 Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries

   Information published.

   CVE-2026-41637 Microsoft
2. 12
   CVE NVD 22 Jul 2026

   In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound…

   In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight…

   CVSS 3.7 CVE-2026-41637