ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Microsoft Teams: Intelligent meeting recap available without saving transcript Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  2. SD JWT JS: Tampered disclosures silently dropped instead of rejected Advisory content revised: SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier, `@sd-jwt/decode`, also used by `@sd-jwt/core`, silently drops a tampered Disclosure whose digest no longer match…3 linked entries across history · in Security Follow evidence and connection reasons
  3. .NET and Visual Studio Remote Code Execution Vulnerability Advisory content revised: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  4. io-wq: order the exit bit against worker creation task work Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  5. io_uring/mpscq: disable preemption while pushing Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  6. io_uring/timeout: don't lose a cancel as io-wq arms a timeout Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  7. io_uring/poll: avoid retry wakeup loss when dropping ownership Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  8. io_uring/net: don't retry recv on uncommitted buffers Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  9. io_uring/openclose: keep the lock in io_pipe_fixed() Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  10. io_uring/zcrx: fix buffer offsets in areas above 4GB Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  11. io_uring/napi: make stale entries time out after 60s Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  12. io_uring: wake ring pollers for local task_work Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.3 linked entries across history · in Security Follow evidence and connection reasons
  13. Cross-tenant access settings Guidance changed3 linked entries across history · in Identity & APIs Follow evidence and connection reasons
  14. Apps that support Intune app protection Guidance changed3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  15. Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  16. Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  17. Cri-o: malicious container can create symlink on host Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  18. Libsoup: out of bounds reads in soup_headers_parse_request() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  19. Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  20. Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  21. Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  22. Libxml: heap use after free (uaf) leads to denial of service (dos) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8 Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period. Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  26. A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTTP Location header after successful authentication, allowing an unvalidated redirect to an attacker-c… Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  27. Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  28. Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063) Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  29. Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  30. rsync through 3.5.1 Denial of Service via hash_search() Checksum Collisions Affected-version evidence changed: rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 08:15 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.