ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Release 2025-10-12 Advisory content revised: runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a raci…4 linked entries across history · across 2 areas Follow evidence and connection reasons
  2. Release 2025-03-16 Affected-version evidence changed: Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos2 linked entries across history · across 2 areas Follow evidence and connection reasons
  3. Release 2025-03-16 Affected-version evidence changed: Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos2 linked entries across history · across 2 areas Follow evidence and connection reasons
  4. Release 2025-08-29 Affected-version evidence changed: Gnutls: vulnerability in gnutls othername san export2 linked entries across history · across 2 areas Follow evidence and connection reasons
  5. Release 2025-08-29 Affected-version evidence changed: Gnutls: vulnerability in gnutls sct extension parsing2 linked entries across history · across 2 areas Follow evidence and connection reasons
  6. Release 2025-08-29 Affected-version evidence changed: Gnutls: vulnerability in gnutls certtool template parsing2 linked entries across history · across 2 areas Follow evidence and connection reasons
  7. Release 2025-08-29 Affected-version evidence changed: Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()2 linked entries across history · across 2 areas Follow evidence and connection reasons
  8. Release 2026-04-02 Advisory content revised: On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading me…3 linked entries across history · across 2 areas Follow evidence and connection reasons
  9. Release 2026-04-02 Advisory content revised: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturles…3 linked entries across history · across 2 areas Follow evidence and connection reasons
  10. Release 2025-04-27 Advisory content revised: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when u…4 linked entries across history · across 2 areas Follow evidence and connection reasons
  11. Windows Kernel Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · across 2 areas Follow evidence and connection reasons
  12. Windows Win32k Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · across 2 areas Follow evidence and connection reasons
  13. Windows Graphics Component Elevation of Privilege Vulnerability Affected-version evidence changed3 linked entries across history · across 2 areas Follow evidence and connection reasons
  14. Windows Raw Image Extension Remote Code Execution Vulnerability Affected-version evidence changed3 linked entries across history · across 2 areas Follow evidence and connection reasons
  15. MC1427603: The July 2026 Windows security update is now available Published vulnerability: Windows Remote Desktop Security Feature Bypass Vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
  16. Microsoft Exchange Server Elevation of Privilege Vulnerability Message Center · Prevent or fix issues: MC1486397: An updated version of the September 2026 Scan Cab is available2 linked entries across history · across 2 areas Follow evidence and connection reasons
  17. KB5101684 · Windows 11, version 24H2 +1 Message Center · Stay informed: MC1452953: The August 2026 Windows security update is now available3 linked entries across history · across 2 areas Follow evidence and connection reasons
  18. Retirements on 31 Jan 2027 Azure update: Retirement: Migrate from Azure Blueprints by January 31, 20272 linked entries across history · across 2 areas Follow evidence and connection reasons
  19. Microsoft WinVerifyTrust function Remote Code Execution Tool release: Release Notes - 2026-03-053 linked entries across history · across 2 areas Follow evidence and connection reasons
  20. KB5068861 · Windows 11, version 24H2 +2 Notice updated: MC1189656: Upcoming Change to Teams Desktop Client on Windows3 linked entries across history · across 2 areas Follow evidence and connection reasons
  21. Microsoft .NET Framework Remote Code Execution Vulnerability Tool release: dbatools 2.5.03 linked entries across history · across 2 areas Follow evidence and connection reasons
  22. ASP.NET Core Elevation of Privilege Vulnerability Advisory content revised: Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.7 linked entries across history · in Security Follow evidence and connection reasons
  23. zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction Advisory content revised: zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls Vec::with_capacity for a symbolic link target using the attacker-controlled ZIP64 uncompr…6 linked entries across history · in Security Follow evidence and connection reasons
  24. Google Chrome policies · 155.0.8059.85 to 156.0.8078.48 Policy templates changed: Google Chrome policies · 157.0.8103.51 to 157.0.8103.795 linked entries across history · in Other vendors Follow evidence and connection reasons
  25. Forge: TLS client crash when the server sends no certificate Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), c.session.serverCertificate, RSA key exchange to process the…5 linked entries across history · in Security Follow evidence and connection reasons
  26. Forge: Regular expression denial of service in PEM decoding (pem.decode) Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode(), lib/pem.js, missing END line to process the relevant input or security decis…5 linked entries across history · in Security Follow evidence and connection reasons
  27. Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pki.verifyCertificateChain(), pki.createCaStore(), duplicate subject names to process the …5 linked entries across history · in Security Follow evidence and connection reasons
  28. Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse(), bnModInverse(), lib/jsbn.js, RSA public exponent e to p…5 linked entries across history · in Security Follow evidence and connection reasons
  29. Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS#12 MAC or PKCS#12 password-based encryption iteration count of zero or less. pki.pbe.generatePkc…5 linked entries across history · in Security Follow evidence and connection reasons
  30. Forge: AES-GCM authentication bypass via unvalidated tagLength option Advisory content revised: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start() during decryption through forge.cipher.createDec…5 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 23:52 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.