ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

This connection is not present in the current public snapshot. Historical item pages retain their own recorded links; no current connection is substituted.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. CriticalUnrealIRCd Improper Neutralization of Delimiters Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  2. CriticalCheck Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  3. CriticalMicrosoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability New CISA KEV listing observed3 linked entries across history · in Security Follow evidence and connection reasons
  4. CriticalBarracuda Networks Multiple Products OS Command Injection Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  5. CriticalBarracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  6. CriticalGoogle Chromium Use-After-Free Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  7. CriticalGPUStack Improper Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  8. CriticalSignalWire FreeSwitch Code Injection Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  9. CriticalOpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  10. CriticalIBM Aspera Faspex Incorrect Authorization Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  11. CriticalSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  12. CriticalIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Newly collected advisory: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.2 linked entries across history · in Security Follow evidence and connection reasons
  13. CriticalWordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  14. CriticalCisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability Advisory content revised: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. 2 linked entries across history · in Security Follow evidence and connection reasons
  15. Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns Affected-version evidence changed17 linked entries across history · in Security Follow evidence and connection reasons
  16. Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std Affected-version evidence changed13 linked entries across history · in Security Follow evidence and connection reasons
  17. Gcc: integer wrap in `std Affected-version evidence changed13 linked entries across history · in Security Follow evidence and connection reasons
  18. Gcc: out-of-bounds read in std::from_chars Affected-version evidence changed12 linked entries across history · in Security Follow evidence and connection reasons
  19. Libxml2: double-free/uaf in libxml2 python bindings Affected-version evidence changed12 linked entries across history · in Security Follow evidence and connection reasons
  20. Gcc: stack overflow in std::bitset on libstdc++ Affected-version evidence changed11 linked entries across history · in Security Follow evidence and connection reasons
  21. Librsvg: use-after-free when xml includes have duplicated entities Advisory content revised: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …22 linked entries across history · in Security Follow evidence and connection reasons
  22. Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) Affected-version evidence changed10 linked entries across history · in Security Follow evidence and connection reasons
  23. Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  24. Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  25. Dpdk: dpdk: double offset bug in vhost log mapping calculation Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  26. Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  27. Flatpak: flatpak: arbitrary write access as root via extra-data extraction Affected-version evidence changed9 linked entries across history · in Security Follow evidence and connection reasons
  28. Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion Affected-version evidence changed8 linked entries across history · in Security Follow evidence and connection reasons
  29. Libsoup: libsoup: heap buffer overflow during websocket message reassembly Affected-version evidence changed8 linked entries across history · in Security Follow evidence and connection reasons
  30. Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth Affected-version evidence changed8 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Checking sources for the first time since the start · documentation 0/440 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners.