ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via __proto__ Language Key Advisory content revised: Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains a prototype pollution vulnerability in lib/messages.js compile() and merge() that fails to reject a __proto__ language key. Attackers supplying untrusted message configuration via…3 linked entries across history · in Security Follow evidence and connection reasons
  2. Microsoft Purview: Data Loss Prevention to restrict processing external emails in Microsoft 365 Copilot and Copilot Chat Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  3. Planner: Local Custom Fields/Columns Launched3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  4. Microsoft Teams: Facilitator's enhanced protection skill can alert you to potential scams Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  5. Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure Advisory content revised: A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values …2 linked entries across history · in Security Follow evidence and connection reasons
  6. Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  7. Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  8. undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor Advisory content revised: undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catc…2 linked entries across history · in Security Follow evidence and connection reasons
  9. GSA Windows client prerequisites and installation Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  10. GSA known limitations Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  11. GSA Windows client health check Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  12. Microsoft Copilot (Microsoft 365): Realtime voice interactions in Word and PowerPoint Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  13. Microsoft Copilot (Microsoft 365): [Copilot Extensibility] Users can explore third-party content in Copilot chat with deep citations and side-by-side previews Cancelled2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  14. Microsoft Copilot (Microsoft 365): Multiple Voice Styles in M365 Copilot voice chats Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  15. Microsoft Teams: Multiple screen shares in Teams Rooms on Windows Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  16. Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename Advisory content revised: wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox writ…3 linked entries across history · in Security Follow evidence and connection reasons
  17. Microsoft Edge allow list Guidance changed3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  18. Outlook: All Accounts view (Unified Inbox) brings your email into a single inbox view Notice updated: MC1519843: (Updated) New Outlook for Windows: All Accounts view brings email into a single inbox view3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  19. Outlook: Duplicate events in Outlook mobile apps Notice updated: MC1492166: (Updated) Microsoft Outlook: New event duplication capability3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  20. Microsoft Teams: Pinch to zoom in on shared screens Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  21. Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead to local code execution. Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. Successful exploitation could lead to privilege escalation. Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Ovirt-engine: potential exposure of cleartext provider passwords via web ui Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  24. odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values Advisory content revised: odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2, he renderer has an `escapeHtml()` helper and applies it co…2 linked entries across history · in Security Follow evidence and connection reasons
  25. Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  26. itsourcecode Online Book Store admin_edit.php sql injection Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  27. Jira Software Data Center: DoS (Denial of Service) node-tar dependency tar Dependency (CVE-2026-73566) Advisory content revised: node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when tar.t(...) …2 linked entries across history · in Security Follow evidence and connection reasons
  28. Jira Software Data Center: File Inclusion postcss Dependency (CVE-2026-73646) Advisory content revised: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap() passes attacker-controlled sourceMappingURL values to join(d…2 linked entries across history · in Security Follow evidence and connection reasons
  29. Microsoft Copilot (Microsoft 365): [Copilot Extensibility] Users can create agents scoped on Custom connector containers Cancelled2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  30. Microsoft Copilot (Microsoft 365): [Copilot Extensibility] User can create agents scoped on specific item/ container using URL Cancelled2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.