ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 20:05 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 40 · 2 Oct – 8 Oct 2023 UTC · assess the changes, then plan the next dates.

What to assess first

2 Oct – 8 Oct · dates to 7 Nov Check coverage

Act on3

  1. Exploited5 Oct 2023

    Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

    CVE-2023-22515

  2. Exploited5 Oct 2023

    Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

    CVE-2023-42824

  3. Exploited2 Oct 2023

    Google Chromium libvpx Heap Buffer Overflow Vulnerability

    CVE-2023-5217

Coming up4

  1. Patch TuesdayScheduled for 10 Oct 2023

    Patch Tuesday, 10 October 2023

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

  2. CISA KEV deadlineDue 25 Oct 2023

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    CVE-2023-28229

  3. CISA KEV deadlineDue 31 Oct 2023

    Microsoft WordPad Information Disclosure Vulnerability

    CVE-2023-36563

    Same day: CISA KEV deadline: Microsoft Skype for Business Privilege Escalation Vulnerability

  4. CISA KEV deadlineDue 3 Oct 2023

    Microsoft Word Information Disclosure Vulnerability

    CVE-2023-36761

    Same day: CISA KEV deadline: Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Changed1

  1. Security4 Oct 2023

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    CVE-2023-28229

How this list is chosen

Changes from 2 Oct 2023 – 8 Oct 2023 UTC and dates due up to 7 Nov 2023. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 20:05 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.