ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  2. PAN-OS: Sensitive Information Disclosure Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  3. Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR) Advisory content revised: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 21.2.0 until 21.2.25 and 22.2.1, RouterLink directives rendered during Node.js server-side rendering re…2 linked entries across history · in Security Follow evidence and connection reasons
  4. Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR) Advisory content revised: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, @angular/router in Node.js server-side rendering fails to require aux…2 linked entries across history · in Security Follow evidence and connection reasons
  5. Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) Advisory content revised: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.34 and 21.0.3, the @angular/common HttpClient function xsrfInterceptorFn uses a regular expres…2 linked entries across history · in Security Follow evidence and connection reasons
  6. Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR) Advisory content revised: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, ServerPlatformLocation in Angular server-side rendering checks for pr…2 linked entries across history · in Security Follow evidence and connection reasons
  7. FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  8. FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  9. Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embed Advisory content revised: Quill is vulnerable to XSS via HTML export feature2 linked entries across history · in Security Follow evidence and connection reasons
  10. Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted Chrome extension. (Chromium security… Source marks advisory rejected: Published Prematurely2 linked entries across history · in Security Follow evidence and connection reasons
  11. Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  12. Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350 Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  13. Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  14. Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Source marks advisory rejected: Duplicate CVE. Replaced by CVE-2026-1253502 linked entries across history · in Security Follow evidence and connection reasons
  15. A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5… Advisory content revised: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 thr…2 linked entries across history · in Security Follow evidence and connection reasons
  16. .NET Tampering Vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  17. ASP.NET Core Denial of Service Vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization Advisory content revised: ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation …2 linked entries across history · in Security Follow evidence and connection reasons
  19. ImageMagick - Division by Zero in Binomial Kernel Processing Advisory content revised: ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large binomial kernel value causing integer overflow, resulting i…2 linked entries across history · in Security Follow evidence and connection reasons
  20. ImageMagick - Memory Leak in Raw Pixel Data Coders Advisory content revised: ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing me…2 linked entries across history · in Security Follow evidence and connection reasons
  21. ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage Advisory content revised: ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from…2 linked entries across history · in Security Follow evidence and connection reasons
  22. ImageMagick - Use-After-Free Write in PDB Decoder Advisory content revised: ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or wr…2 linked entries across history · in Security Follow evidence and connection reasons
  23. ImageMagick - Heap Use-After-Free in Meta Coder Advisory content revised: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it by processing specially crafted image fil…2 linked entries across history · in Security Follow evidence and connection reasons
  24. ImageMagick - Command Injection via SVG Decoder Advisory content revised: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Grap…2 linked entries across history · in Security Follow evidence and connection reasons
  25. WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' Parameter Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  26. In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of permissions assigned to a user that allowed them to view users or audit events, could result in the u… Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  27. Microsoft Teams: Intelligent recap for DoD Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  28. Microsoft Copilot (Microsoft 365): [Copilot Extensibility] Users will be able to upload files stored locally or in one drive to custom engine agents Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  29. Microsoft Copilot (Microsoft 365): Copilot People Connectors introduces people data ingestions with differentiated access control Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  30. Microsoft Purview: Endpoint Data Loss Prevention - Policy Sync & Device Health AI-Powered Investigation Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.