ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Outlook: Block External Images Settings Update Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  2. Microsoft Teams: Additional health signals available for Teams Rooms on Android on Pro Management Portal Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  3. Microsoft Copilot (Microsoft 365): Federated Copilot Connectors in Microsoft 365 Copilot Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  4. Planner: Refreshed experience and new capabilities Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  5. Microsoft Copilot (Microsoft 365): Copilot Chat in OneNote can create, edit, and refine content Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  6. Microsoft 365 Apps: Cloud Update - Export Improvements Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  7. Wednesday, November 11, 2026 Security Releases Security advisory2 linked entries across history · in Security Follow evidence and connection reasons
  8. Go JOSE: Panic during CBC-HMAC processing Advisory content revised: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, decryp…6 linked entries across history · in Security Follow evidence and connection reasons
  9. zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE Advisory content revised: zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames wit…5 linked entries across history · in Security Follow evidence and connection reasons
  10. Go JOSE: Panics in JSON parsing Advisory content revised: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.5, parsin…4 linked entries across history · in Security Follow evidence and connection reasons
  11. rustls before 0.23.46 Denial of Service via Brotli Certificate Decompression Advisory content revised: rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. Malicious peers can send a cer…4 linked entries across history · in Security Follow evidence and connection reasons
  12. imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow Advisory content revised: imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps th…4 linked entries across history · in Security Follow evidence and connection reasons
  13. DLP policy reference Guidance changed4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  14. Cloudflare: Changes to Cloudflare Workers are not producing Event Subscription events Ongoing incident4 linked entries across history · in Other vendors Follow evidence and connection reasons
  15. mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet Advisory content revised: mDNS string cache accepts a shorter name as a match for a longer stored one, so the known-answer encoder writes past the transmit packet3 linked entries across history · in Security Follow evidence and connection reasons
  16. Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http Advisory content revised: Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3 that allows guests to set unvalidated content-length headers. Malicious wasip3 guests can splice an existing body into a new …3 linked entries across history · in Security Follow evidence and connection reasons
  17. Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection Advisory content revised: devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing multiple promises, a later promise rejecting before an earlier one settles leaves an internal rejection unhandled, eve…3 linked entries across history · in Security Follow evidence and connection reasons
  18. Devalue before 5.9.3 CPU Amplification Denial of Service via uneval Advisory content revised: Sveltejs devalue before 5.9.3 contains a denial of service vulnerability that allows attackers to cause CPU amplification by supplying sparse arrays to uneval. Attackers who influence sparse values passed to uneval can force synchronous wor…3 linked entries across history · in Security Follow evidence and connection reasons
  19. Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Advisory content revised: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  20. Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Advisory content revised3 linked entries across history · in Security Follow evidence and connection reasons
  21. Teams limits Guidance changed3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  22. xen-netback: defer xenvif_mcast_addr_list_free() Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  23. OS command injection in Ivanti Sentry before versions 10.7.4, 10.8.3, and 11.0.0 as well as in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code … Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  24. Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  25. Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  26. Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  27. Microsoft Office SharePoint Elevation of Privilege Vulnerability Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  28. Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  29. Argument injection in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  30. An exposed dangerous function in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a local authenticated attacker to trigger a denial of service. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.