ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Krb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failure Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  2. Krb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error path Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  3. Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  4. Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  5. Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  6. Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  7. Krb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanup Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  8. Krb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requests Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  9. Patch: filename validation bypass in reversal fallback allows file creation outside the working directory Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  10. Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decoding Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  11. Gst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handling Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  12. Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 Newly collected advisory: NSEC3 owner names not checked against the zone in DNSSEC validation (hickory-proto)3 linked entries across history · in Security Follow evidence and connection reasons
  13. Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset Newly collected advisory: DNSSEC validation accepted an unrelated signed RRset as the answer (hickory-proto)3 linked entries across history · in Security Follow evidence and connection reasons
  14. Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals Newly collected advisory: Recursor kept querying cyclic glueless sibling delegations3 linked entries across history · in Security Follow evidence and connection reasons
  15. Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals Newly collected advisory: NXDOMAIN accepted for a proven empty non-terminal (hickory-proto)3 linked entries across history · in Security Follow evidence and connection reasons
  16. Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery Newly collected advisory: Inverted NSEC3 comparison in DNSSEC validation (hickory-proto 0.25)3 linked entries across history · in Security Follow evidence and connection reasons
  17. Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification Newly collected advisory: Recursor followed every glueless name server in a referral, with no per-query budget3 linked entries across history · in Security Follow evidence and connection reasons
  18. Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  19. Teams Rooms app release notes Guidance changed8 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  20. Microsoft Purview: Endpoint Data Loss Prevention - Policy Sync & Device Health AI-Powered Investigation Date moved later5 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  21. Aspire Information Disclosure Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability4 linked entries across history · in Security Follow evidence and connection reasons
  22. Windows policies · 23H2 · 1.0 to 24H2 · 1.0 Policy templates changed: Windows policies · 25H2 · 1.0 to 26H2 · 1.03 linked entries across history · in Windows Follow evidence and connection reasons
  23. Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  24. Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  25. ASP.NET Core Elevation of Privilege Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-109481 - ASP.NET Core Elevation of Privilege Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  26. Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  27. Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  28. Gimp: gimp: use-after-free in xcf loader via prop_selected_path Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  29. ASP.NET Core Elevation of Privilege Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114146 - ASP.NET Core Elevation of Privilege Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  30. ASP.NET Core Information Disclosure Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114150 - ASP.NET Core Information Disclosure Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 19:39 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.