ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Visual Studio Remote Code Execution Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  2. Visual Studio Remote Code Execution Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  3. .NET Elevation of Privilege Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114155 - .NET Elevation of Privilege Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  4. ASP.NET Core Security Feature Bypass Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  5. ASP.NET Core Security Feature Bypass Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114157 - ASP.NET Core Security Feature Bypass Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  6. Visual Studio Remote Code Execution Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  7. Visual Studio Remote Code Execution Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  8. ASP.NET Core Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  9. Visual Studio Remote Code Execution Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  10. ASP.NET Core Denial of Service Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-118748 - ASP.NET Core Denial of Service Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  11. ASP.NET Core Denial of Service Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-118749 - ASP.NET Core Denial of Service Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  12. ASP.NET Core Denial of Service Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-118750 - ASP.NET Core Denial of Service Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  13. Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groups Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  14. Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its firmware Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  15. Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  16. Aspire Elevation of Privilege Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  17. .NET Denial of Service Vulnerability Newly collected advisory: Microsoft Security Advisory CVE-2026-120796 - .NET Denial of Service Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  18. Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old role Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  19. Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by someone else Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  20. Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  21. Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  22. Crun: crun: rootful krun with passt executes container payload as host root Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  23. Gvfs: sftp: heap-based buffer overflow in read_reply() Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  24. Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  25. Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  26. Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  27. Gvfs: gvfs-admin socket ownership race permits local root Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  28. Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  29. Gimp: gimp: heap-based buffer overflow in ico loader via integer overflow in embedded png dimensions Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  30. Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 19:39 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.