ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

This connection is not present in the current public snapshot. Historical item pages retain their own recorded links; no current connection is substituted.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. CriticalUnrealIRCd Improper Neutralization of Delimiters Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  2. CriticalCheck Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  3. CriticalMicrosoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability New CISA KEV listing observed3 linked entries across history · in Security Follow evidence and connection reasons
  4. CriticalBarracuda Networks Multiple Products OS Command Injection Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  5. CriticalBarracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  6. CriticalGoogle Chromium Use-After-Free Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  7. CriticalGPUStack Improper Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  8. CriticalSignalWire FreeSwitch Code Injection Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  9. CriticalOpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  10. CriticalIBM Aspera Faspex Incorrect Authorization Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  11. CriticalSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  12. CriticalIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Newly collected advisory: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.2 linked entries across history · in Security Follow evidence and connection reasons
  13. CriticalWordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  14. CriticalCisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability Advisory content revised: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. 2 linked entries across history · in Security Follow evidence and connection reasons
  15. Graph changes Guidance changed18 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  16. Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns Affected-version evidence changed15 linked entries across history · in Security Follow evidence and connection reasons
  17. Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std Affected-version evidence changed13 linked entries across history · in Security Follow evidence and connection reasons
  18. Gcc: integer wrap in `std Affected-version evidence changed13 linked entries across history · in Security Follow evidence and connection reasons
  19. Gcc: out-of-bounds read in std::from_chars Affected-version evidence changed12 linked entries across history · in Security Follow evidence and connection reasons
  20. Gcc: stack overflow in std::bitset on libstdc++ Affected-version evidence changed11 linked entries across history · in Security Follow evidence and connection reasons
  21. Libxml2: double-free/uaf in libxml2 python bindings Affected-version evidence changed10 linked entries across history · in Security Follow evidence and connection reasons
  22. Windows App changes Guidance changed10 linked entries across history · in Azure Follow evidence and connection reasons
  23. Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  24. Dpdk: dpdk: double offset bug in vhost log mapping calculation Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  25. Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  26. Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  27. Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if Affected-version evidence changed8 linked entries across history · in Security Follow evidence and connection reasons
  28. Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write Affected-version evidence changed8 linked entries across history · in Security Follow evidence and connection reasons
  29. Flatpak: flatpak: arbitrary write access as root via extra-data extraction Affected-version evidence changed8 linked entries across history · in Security Follow evidence and connection reasons
  30. Librsvg: use-after-free when xml includes have duplicated entities Advisory content revised: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …18 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Checking sources for the first time since the start · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners.