ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  2. Out-of-bounds write in `aes::unwrap_key` Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  3. CRIU: Parasite hijack triggered by snapshot of malicious software Source marks advisory rejected: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18107. Reason: This candidate is a duplicate of CVE-2026-18107. Notes: All CVE users should reference CVE-2026-18107 instead of this candidate.2 linked entries across history · in Security Follow evidence and connection reasons
  4. MC1546354: Discover usage-based billing (UBB) experiences like Cowork, Code, and Autopilot Message Center · Plan for change2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  5. Nodemailer 3.0.0 before 10.1.4 Recipient Domain Confusion via addressparser Advisory content revised: Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a '>' inside a quoted local part, comment or domain literal. Attackers can submit addresses that validate as an allowe…3 linked entries across history · in Security Follow evidence and connection reasons
  6. rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello Newly collected advisory3 linked entries across history · in Security Follow evidence and connection reasons
  7. rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosure Newly collected advisory3 linked entries across history · in Security Follow evidence and connection reasons
  8. imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader Newly collected advisory3 linked entries across history · in Security Follow evidence and connection reasons
  9. imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader Newly collected advisory3 linked entries across history · in Security Follow evidence and connection reasons
  10. Buildah: buildah: container escape via improper bind mount validation Advisory content revised: A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root …2 linked entries across history · in Security Follow evidence and connection reasons
  11. Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  12. Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  13. Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  14. Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  15. LXD: SSRF via image import from URL allows internal network probing by authenticated users Advisory content revised: In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users with the can_create_images entitlement to interact with internal network infrastruct…2 linked entries across history · in Security Follow evidence and connection reasons
  16. listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials Advisory content revised: listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parameter into QuerySubscribersForExport in internal/core/subscrib…2 linked entries across history · in Security Follow evidence and connection reasons
  17. @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter Advisory content revised: The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attacker…2 linked entries across history · in Security Follow evidence and connection reasons
  18. LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at Advisory content revised: Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes permissions to cause a denial of service via a specially crafted custom-volume b…2 linked entries across history · in Security Follow evidence and connection reasons
  19. Incus has an arbitrary file write on host via `exec-output` symlink in crafted image Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the command in the `exec-output` directory of the instance. If `exec…5 linked entries across history · in Security Follow evidence and connection reasons
  20. Incus has a restricted project bypass leading to arbitrary command execution Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel …5 linked entries across history · in Security Follow evidence and connection reasons
  21. Incus has a project restriction bypass for custom volume copy across projects Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a c…5 linked entries across history · in Security Follow evidence and connection reasons
  22. undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering Advisory content revised: undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSocket exposed by Node.js, can be driven to exhaust process memo…4 linked entries across history · in Security Follow evidence and connection reasons
  23. go-chi chi 5.2.2 through 5.5.0 Open Redirect via RedirectSlashes Middleware Advisory content revised: go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attackers to redirect victims to external hosts by embedding tab characters in request paths. Attackers can craft links wit…4 linked entries across history · in Security Follow evidence and connection reasons
  24. Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes…4 linked entries across history · in Security Follow evidence and connection reasons
  25. Incus has arbitrary file read+write on host via templates/ symlink in malicious image Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. …4 linked entries across history · in Security Follow evidence and connection reasons
  26. Incus has an argument injection in backup compression algorithm leading to AFW and ACE Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file …4 linked entries across history · in Security Follow evidence and connection reasons
  27. Incus has an arbitrary file write on its client due to trusted image hash Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted `Incus-Image-Hash` header. This can lead to arbitrary comman…4 linked entries across history · in Security Follow evidence and connection reasons
  28. .NET Elevation of Privilege Vulnerability Advisory content revised: Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.4 linked entries across history · in Security Follow evidence and connection reasons
  29. Microsoft Purview: Endpoint Data Loss Prevention - Protect sensitive data over FTP and SFTP with Endpoint DLP Launched4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  30. Microsoft Purview: Data Loss Prevention for Microsoft Cowork Launched4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.