ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Microsoft Edge: v.156 - Improvements to site permissions user interfaces Roadmap entry3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  2. socket.getaddrinfo() accepts embedded null bytes in host and port Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  3. Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope) Advisory content revised: Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join call…2 linked entries across history · in Security Follow evidence and connection reasons
  4. Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check Advisory content revised: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON rebuilds an AsyncIteratorFactoryInstance by calling source.on(listener) without requiring source…2 linked entries across history · in Security Follow evidence and connection reasons
  5. Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS) Advisory content revised: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON and fromCrossJSON do not validate a sequence node's done index. A crafted done index can create …2 linked entries across history · in Security Follow evidence and connection reasons
  6. Seroval: Script injection through RegExp sources in serialized output Advisory content revised: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.0.0 and from 1.5.5 until 1.6.10, the JavaScript-output APIs serialize a RegExp source containing a less-than c…2 linked entries across history · in Security Follow evidence and connection reasons
  7. Seroval: Code injection through a typed array's own constructor property Advisory content revised: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive a typed array's constructor name from a property on the value …2 linked entries across history · in Security Follow evidence and connection reasons
  8. Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length Advisory content revised: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.4.1 until 1.6.8, fromJSON and fromCrossJSON do not require an array node's element list to be an actual array. A s…2 linked entries across history · in Security Follow evidence and connection reasons
  9. Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  10. systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net Advisory content revised: systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in an fs.existsSync() check and to build /sys/class/net/<iface> pa…2 linked entries across history · in Security Follow evidence and connection reasons
  11. systeminformation has prototype pollution in `networkStats()` via the interface name Advisory content revised: systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it with …2 linked entries across history · in Security Follow evidence and connection reasons
  12. Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling Advisory content revised: Guests can send absolute-form HTTP requests to different hosts2 linked entries across history · in Security Follow evidence and connection reasons
  13. Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags Advisory content revised: Exception tags can cause host data structures to be unaligned2 linked entries across history · in Security Follow evidence and connection reasons
  14. Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles Advisory content revised: Component-model handle tables are capped only per instance and charged to no limit2 linked entries across history · in Security Follow evidence and connection reasons
  15. Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry Advisory content revised: Stack overflow dropping a long chain of recursive types2 linked entries across history · in Security Follow evidence and connection reasons
  16. Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap Advisory content revised: Panic when pending calls are run after a trap2 linked entries across history · in Security Follow evidence and connection reasons
  17. Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc Advisory content revised: Panic on erroneous call-to-host from guest realloc call2 linked entries across history · in Security Follow evidence and connection reasons
  18. Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop Advisory content revised: Host panic when component `call_async` is cancelled under some conditions2 linked entries across history · in Security Follow evidence and connection reasons
  19. Microsoft Office Outlook Remote Code Execution Vulnerability Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  20. Autopilot device preparation changes Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  21. Autopilot changes Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  22. Internet Access web filtering (V2) Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  23. Combined security information registration Guidance changed2 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  24. iOS and iPadOS enrollment guide Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  25. macOS enrollment guide Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  26. Sensitivity label encryption Guidance changed2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  27. Microsoft Teams: Event Chat now available for Events optimized for a large audience in GCC, GCC High and DoD Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  28. Microsoft Teams: AI Interpreter for Teams Events Date moved later2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  29. Cloudflare: Increased error rates and reduced success rates for Workflows operations Ongoing incident8 linked entries across history · in Other vendors Follow evidence and connection reasons
  30. MC1227622: (Updated) Transitioning Teams Android Device Management from Teams admin Center to the Teams Rooms Pro Management portal Notice updated5 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 15:18 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.