ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Sssd: out-of-bounds read in the sssd Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  2. Windows Win32k Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  3. Windows Imaging Component Remote Code Execution Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  4. Graphic Fonts Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  5. Win32k Information Disclosure Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  6. Windows Win32k Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  7. Windows Imaging Component Remote Code Execution Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  8. Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  9. Microsoft SQL Server Remote Code Execution Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  10. Microsoft SQL Server Remote Code Execution Vulnerability Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  11. ipc: drop the mqueue mount with kern_unmount() on setup failure Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  12. Windows Installer Elevation of Privilege Vulnerability Published vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  13. PowerShell Elevation of Privilege Vulnerability Published vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  14. PowerShell Elevation of Privilege Vulnerability Published vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  15. compress zstd: Panic on two-block frames Advisory content revised: compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores …9 linked entries across history · in Security Follow evidence and connection reasons
  16. Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials Advisory content revised: A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring …12 linked entries across history · in Security Follow evidence and connection reasons
  17. Incus has a project restriction bypass in instance copy across projects Advisory content revised: Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an insta…6 linked entries across history · in Security Follow evidence and connection reasons
  18. Fabric changes Guidance changed4 linked entries across history · in Azure Follow evidence and connection reasons
  19. Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  20. Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735 Advisory content revised: Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of `CVE-2026-47735` leaves a cross-database authorization bypass through DuckDB table-valued I/O functions. In `…5 linked entries across history · in Security Follow evidence and connection reasons
  21. Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  22. Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover Affected-version evidence changed4 linked entries across history · in Security Follow evidence and connection reasons
  23. Coreutils: heap buffer under-read in gnu coreutils sort via key specification Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  24. Libxml2: stack buffer overflow in xmllint interactive shell command handling Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  25. Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  26. Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  27. Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  28. Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  29. Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop Affected-version evidence changed3 linked entries across history · in Security Follow evidence and connection reasons
  30. Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint Newly collected advisory3 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 21:45 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.