Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  2. Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  3. Publication 421: 55 tags changed Azure service tags published: Publication 426: 138 tags changed6 linked entries across history · in Azure Follow evidence and connection reasons
  4. Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  5. Gnutls: gnutls: security bypass due to incorrect name constraint handling Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  6. Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  7. Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  8. Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  9. Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  10. Gcc: libstdc++ integer overflow in `new` operator Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  11. Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  12. Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  13. Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  14. Pipewire: pulse server alloca stack overflow Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  15. Webkitgtk: use-after-free of jscvalue function parameters Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  16. Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature Affected-version evidence changed6 linked entries across history · in Security Follow evidence and connection reasons
  17. Microsoft Exchange Server Spoofing Vulnerability Published vulnerability6 linked entries across history · in Security Follow evidence and connection reasons
  18. Microsoft Exchange Server Spoofing Vulnerability Published vulnerability6 linked entries across history · in Security Follow evidence and connection reasons
  19. Microsoft Exchange Server Spoofing Vulnerability Published vulnerability6 linked entries across history · in Security Follow evidence and connection reasons
  20. Microsoft Office PowerPoint Remote Code Execution Vulnerability Published vulnerability6 linked entries across history · in Security Follow evidence and connection reasons
  21. .NET Information Disclosure Vulnerability Published vulnerability6 linked entries across history · in Security Follow evidence and connection reasons
  22. .NET Information Disclosure Vulnerability Published vulnerability6 linked entries across history · in Security Follow evidence and connection reasons
  23. May 2018 Patch Tuesday Out-of-band release: KB4338548 · Windows 10, version 18036 linked entries across history · in Windows Follow evidence and connection reasons
  24. March 2018 Patch Tuesday Out-of-band release: KB4096309 · Windows 10, version 1607 +16 linked entries across history · in Windows Follow evidence and connection reasons
  25. November 2017 Patch Tuesday Out-of-band release: KB4055254 · Windows 10, version 17036 linked entries across history · in Windows Follow evidence and connection reasons
  26. June 2017 Patch Tuesday Out-of-band release: KB4032693 · Windows 10, version 15116 linked entries across history · in Windows Follow evidence and connection reasons
  27. Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing Affected-version evidence changed5 linked entries across history · in Security Follow evidence and connection reasons
  28. Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf Affected-version evidence changed5 linked entries across history · in Security Follow evidence and connection reasons
  29. Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service Affected-version evidence changed5 linked entries across history · in Security Follow evidence and connection reasons
  30. Cockpit: cockpit: denial of service via unbounded fragmented websocket messages Affected-version evidence changed5 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 18:36 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current