ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Race condition, use-after-free in the DOM: File component Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  2. Sandbox escape due to use-after-free in the XPCOM component Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  3. Use-after-free in the Graphics: Text component Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  4. Sssd: use-after-free crash in sssd' 'sssd_pam' process Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  5. Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  6. Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  7. Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  8. Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  9. Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  10. Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  11. Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  12. kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts Advisory content revised: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-creden…6 linked entries across history · in Security Follow evidence and connection reasons
  13. Azure Arc-enabled servers prerequisites Guidance changed5 linked entries across history · in Azure Follow evidence and connection reasons
  14. Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads Source changes critical severity rating: Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0.4 linked entries across history · in Security Follow evidence and connection reasons
  15. Microsoft Teams: Improved organization for muted and meeting chats Date moved later6 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  16. Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  17. Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  18. Resteasy-core: resteasy sourceprovider remote unauthenticated file read Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  19. Crowd Data Center: DoS (Denial of Service) io.netty:netty-codec-http Dependency (CVE-2026-93488) Affected-version evidence changed: Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams4 linked entries across history · in Security Follow evidence and connection reasons
  20. Crowd Data Center: DoS (Denial of Service) io.netty:netty-codec-http Dependency (CVE-2026-93491) Affected-version evidence changed: Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue4 linked entries across history · in Security Follow evidence and connection reasons
  21. Crowd Data Center: DoS (Denial of Service) io.netty:netty-codec-http Dependency (CVE-2026-93558) Affected-version evidence changed: Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service4 linked entries across history · in Security Follow evidence and connection reasons
  22. Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure Affected-version evidence changed5 linked entries across history · in Security Follow evidence and connection reasons
  23. Copilot requirements Guidance changed5 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  24. Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  25. Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  26. Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  27. Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  28. Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  29. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  30. Microsoft Purview compliance portal: Cloud Attachments preservation for users on hold Date moved later5 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 18:36 UTC · 273 of 275 readable · 271 fully read · documentation 454/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.