ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. CriticalGoogle Skia Out-of-Bounds Write Vulnerability Security advisory: Edge 146.0.3856.62: fixes CVE-2026-3909, exploited in the wild2 linked entries across history · in Security Follow evidence and connection reasons
  2. CriticalGoogle Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  3. CriticalBroadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  4. CriticalAtlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Security advisory: WAF - WAF Release - 2025-12-182 linked entries across history · in Security Follow evidence and connection reasons
  5. CriticalEdge 143.0.3650.80: fixes CVE-2025-14174, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium Out of Bounds Memory Access Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  6. CriticalFortinet FortiWeb Path Traversal Vulnerability Security advisory: WAF - WAF Release - 2025-11-242 linked entries across history · in Security Follow evidence and connection reasons
  7. CriticalEdge 142.0.3595.90: fixes CVE-2025-13223, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium V8 Type Confusion Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  8. CriticalOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Security advisory: WAF - WAF Release - 2025-10-30 - Emergency4 linked entries across history · in Security Follow evidence and connection reasons
  9. CriticalBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  10. CriticalEdge 140.0.3485.81: fixes CVE-2025-10585, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium V8 Type Confusion Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  11. CriticalEdge 138.0.3351.95: fixes CVE-2025-6558, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  12. CriticalEdge 138.0.3351.65: fixes CVE-2025-6554, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium V8 Type Confusion Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  13. CriticalEdge 134.0.3124.93: fixes CVE-2025-2783, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium Mojo Sandbox Escape Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  14. CriticalEdge 134.0.3124.62: fixes CVE-2025-24201, exploited in the wild Apple · exploited, added to CISA KEV: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  15. CriticalVMware ESXi and Workstation TOCTOU Race Condition Vulnerability VMware · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  16. CriticalVMware ESXi Arbitrary Write Vulnerability VMware · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  17. CriticalVMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability VMware · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  18. CriticalVMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  19. CriticalVMware vCenter Server Privilege Escalation Vulnerability VMware · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  20. CriticalRetirements on 9 Dec 2026 Announced retirement: Microsoft 365 Copilot Microsoft enables Claude models for tenants that haven't made a selection, and the option to allow them only in Copilot in Microsoft 365 apps retired2 linked entries across history · in Lifecycle Follow evidence and connection reasons
  21. CriticalChrome 157.0.8103.50: 8 security fixes, 1 exploited in the wild Revised by Chrome security releases (Google)2 linked entries across history · in Security Follow evidence and connection reasons
  22. CriticalGoogle Chromium WebP Heap-Based Buffer Overflow Vulnerability Advisory content revised: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)3 linked entries across history · in Security Follow evidence and connection reasons
  23. CriticalGoogle Chromium libvpx Heap Buffer Overflow Vulnerability Advisory content revised: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)2 linked entries across history · in Security Follow evidence and connection reasons
  24. CriticalPalo Alto Networks PAN-OS Code Injection Vulnerability Security advisory: CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)2 linked entries across history · in Security Follow evidence and connection reasons
  25. CriticalVMware ESXi Authentication Bypass Vulnerability VMware · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  26. CriticalOracle JRE Remote Code Execution Vulnerability Oracle · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  27. CriticalOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  28. CriticalOracle WebLogic Server, Injection Oracle · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  29. CriticalOracle WebLogic Server Deserialization of Untrusted Data Vulnerability Oracle · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  30. CriticalOracle WebLogic Server Remote Code Execution Vulnerability Oracle · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 17:32 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.