Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 270/272 feeds/APIs · 469/469 docs · 7/9 advisories · checked 19:50 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 21 · 18 May – 24 May 2026 UTC · assess the changes, then plan the next dates.

What to assess first

18 May – 24 May · dates to 23 Jun Check coverage

Coming up8

  1. CISA KEV deadlineDue 29 May 2026

    Microsoft Exchange Server Cross-Site Scripting Vulnerability

    CVE-2026-42897

  2. CISA KEV deadlineDue 3 Jun 2026

    Microsoft Windows Buffer Overflow Vulnerability

    CVE-2008-4250

    Same day: CISA KEV deadline: Microsoft DirectX NULL Byte Overwrite Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Defender Link Following Vulnerability; CISA KEV deadline: Microsoft Defender Denial of Service Vulnerability

  3. Patch TuesdayScheduled for 9 Jun 2026

    Patch Tuesday, 9 June 2026

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed4

  1. Security20 May 2026

    Microsoft Windows Buffer Overflow Vulnerability

    CVE-2008-4250

  2. Security20 May 2026

    Defender · 2 security records

    CVE-2026-41091

How this list is chosen

Changes from 18 May 2026 – 24 May 2026 UTC and dates due up to 23 Jun 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 19:50 UTC · 270 of 272 readable · 269 fully read · documentation 469/469 current