ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. SQL injection leading to privilege escalation Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  2. 101arrowz fflate index.mjs unzipSync memory corruption Advisory content revised: 101arrowz fflate index.mjs unzipSync memory allocation2 linked entries across history · in Security Follow evidence and connection reasons
  3. An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial of service. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  4. A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  5. nasa-gcn gcn.nasa.gov Email Notification email improper authorization Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  6. Nuxt UI: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration Advisory content revised: @nuxt/ui: UAuthForm / UForm SSR markup omits `method`, leaking credentials via GET if submitted before hydration2 linked entries across history · in Security Follow evidence and connection reasons
  7. Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate Advisory content revised: @dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate2 linked entries across history · in Security Follow evidence and connection reasons
  8. Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. Advisory content revised: This issue can cause a heap-use-after-free when an embedder unloads a ReloadableString buffer while a previously returned raw character pointer remains in use. Successful triggering may cause the Escargot-based process to crash, resulting i…2 linked entries across history · in Security Follow evidence and connection reasons
  9. Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  10. Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  11. Buffer overflow in `Deriver::derive` and `PkeyCtxRef::derive` with OpenSSL 1.1.x Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  12. Out-of-bounds read when a PEM password callback returns an oversized length Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  13. Buffer overflow in `MdCtxRef::digest_final` Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  14. Unchecked callback lengths in PSK and cookie callbacks Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  15. `X509Ref::ocsp_responders` can produce a `&str` that is not valid UTF-8 Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  16. Buffer overflow with AES key wrap with padding in `cipher_update` Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  17. Buffer overflow with AES key wrap with padding in `cipher_update_inplace` Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  18. TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string() Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  19. Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  20. PowerShell Elevation of Privilege Vulnerability Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  21. Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  22. ksmbd: hold a connection reference for each session channel Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  23. Defender for Office 365 preset security policies Guidance changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. Defender unified RBAC permissions Guidance changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. Microsoft Edge supported operating systems Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  26. Private network connector release history Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  27. Jira Software Data Center: DoS (Denial of Service) js-yaml Dependency (CVE-2026-84375) Advisory content revised: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping sources while processing the merge key <<. An attacker can …6 linked entries across history · in Security Follow evidence and connection reasons
  28. Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting Advisory content revised: A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to n…5 linked entries across history · in Security Follow evidence and connection reasons
  29. Jira Software Data Center: SSRF (Server-Side Request Forgery) fast-uri Dependency (CVE-2026-75975) Advisory content revised: fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is …5 linked entries across history · in Security Follow evidence and connection reasons
  30. Jira Software Data Center: SSRF (Server-Side Request Forgery) fast-uri Dependency (CVE-2026-76172) Advisory content revised: fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization writes the scheme back out verbatim, unlike the host component which is re-esca…5 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.