ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Advisory content revised: Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: High)2 linked entries across history · in Security Follow evidence and connection reasons
  2. Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Advisory content revised: Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security seve…2 linked entries across history · in Security Follow evidence and connection reasons
  3. Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Advisory content revised: Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)2 linked entries across history · in Security Follow evidence and connection reasons
  4. OAuth2 SSRF vulnerability in SAP Cloud SDK for Python Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  5. fork: release the files of a failed fork after sched_cancel_fork() Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2 linked entries across history · in Security Follow evidence and connection reasons
  6. tipc: protect node reset trace dump with node lock Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  7. sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  8. Sensitivity labels Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  9. Planner: Save AI-generated filters in Planner Agent chat Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  10. Dynamics 365 Field Service: Streamline mobile work with an optimized Subgrid control Roadmap entry2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  11. Microsoft Purview: Permissions audit log improvements Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  12. Microsoft Teams: Default meeting templates Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  13. WAF - WAF Release - 2026-10-30 Revised by Cloudflare WAF changelog2 linked entries across history · in Security Follow evidence and connection reasons
  14. Defender unified role-based access control Guidance changed3 linked entries across history · in Security Follow evidence and connection reasons
  15. FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder Advisory content revised: FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder2 linked entries across history · in Security Follow evidence and connection reasons
  16. FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing Advisory content revised: FreeImage through 3.18.0 and danoli3 fork before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing2 linked entries across history · in Security Follow evidence and connection reasons
  17. pybars4 through 0.9.13 Code Injection via Bracketed Path Segments Source marks advisory rejected: This CVE ID has been rejected as a duplicate.2 linked entries across history · in Security Follow evidence and connection reasons
  18. Unbounded memory allocation in `thrift` binary protocol `read_bytes` Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  19. Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import Advisory content revised: functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import2 linked entries across history · in Security Follow evidence and connection reasons
  20. Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist Advisory content revised: Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8.6.83. When an uploaded file's extension is not recognized by the mime package, Parse Server preserves the client-s…2 linked entries across history · in Security Follow evidence and connection reasons
  21. MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  22. Moving Sentinel to the Defender portal Guidance changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction Advisory content revised: Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditio…3 linked entries across history · in Security Follow evidence and connection reasons
  24. Jira Software Data Center: Injection fast-uri Dependency (CVE-2026-16221) Advisory content revised: Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node's native WHATWG URL parser, used by fet…2 linked entries across history · in Security Follow evidence and connection reasons
  25. Jira Software Data Center: Injection fast-uri Dependency (CVE-2026-18446) Advisory content revised: fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it (backslash backslash, forward slash backslash, or backslash f…2 linked entries across history · in Security Follow evidence and connection reasons
  26. Jira Service Management Data Center: DoS (Denial of Service) linkify-it Dependency (CVE-2026-59887) Advisory content revised: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test() and .match() can be invoked at every mailto: occurrence and scan the remaining input through src_email_name in…2 linked entries across history · in Security Follow evidence and connection reasons
  27. .NET Denial of Service Vulnerability Advisory content revised: A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.2 linked entries across history · in Security Follow evidence and connection reasons
  28. .NET Remote Code Execution Vulnerability Advisory content revised: Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.2 linked entries across history · in Security Follow evidence and connection reasons
  29. .NET Framework Security Feature Bypass Vulnerability Advisory content revised: Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.2 linked entries across history · in Security Follow evidence and connection reasons
  30. Jira Software Data Center: DoS (Denial of Service) browserslist Dependency (CVE-2026-73088) Advisory content revised: Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally through getStat() and loadStat() on every browserslist() ca…2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 14:14 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.