ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. watch_queue: Fix note pool publication race in watch_queue_set_size() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. autofs: ignore notification errors from a replaced pipe Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  3. ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. perf: Fix perf_pmu_migrate_context() leaving events behind Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  5. gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  6. calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  7. net: bcmgenet: unshare the skb before writing the control block Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  8. netlink: avoid hashing the network namespace pointer Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  9. scsi: libsas: Fix SMP IO deadlock during HA resume Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  10. ocfs2/dlm: Protect the recovery list during debugfs reads Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  11. scsi: target: iscsi: Fix race in discovery auth updates Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  12. netlink: reset skb headers before unicast and multicast filtering Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  13. drm/vc4: hdmi: Move packet RAM enable to PM runtime Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  14. Microsoft Copilot (Microsoft 365): Copilot Chat in Outlook expands to reason over inbox, calendar, and enterprise data Now rolling out4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  15. TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization Advisory content revised: TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute maliciou…3 linked entries across history · in Security Follow evidence and connection reasons
  16. CKEditor: Cross-site scripting (XSS) in the engine package Advisory content revised: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to …3 linked entries across history · in Security Follow evidence and connection reasons
  17. CKEditor: Cross-site scripting (XSS) in the engine package Advisory content revised: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes inc…3 linked entries across history · in Security Follow evidence and connection reasons
  18. dd-trace: ReDOS in URL query string obfuscation Advisory content revised: dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP can perform excessive backtracking on attacker-controlled URL query strings. The expression is applied…3 linked entries across history · in Security Follow evidence and connection reasons
  19. Microsoft Purview compliance portal: Scanner data export for custom reporting Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  20. Microsoft Purview: Data Lifecycle Management-Legacy Teams retention policies covering Copilot will be treated as Teams-only Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  21. ASP.NET Core Elevation of Privilege Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  22. Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  23. Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_result Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  24. CVE-2026-15146 Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  25. Microsoft Edge (Chromium-based) Spoofing Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  26. WordPress Booknetic plugin < 5.10.4 - Broken Authentication vulnerability Affected-version evidence changed: WordPress Booknetic plugin < 5.10.3 - Broken Authentication vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  27. WordPress Booknetic plugin < 5.10.4 - SQL Injection vulnerability Affected-version evidence changed: WordPress Booknetic plugin < 5.10.3 - SQL Injection vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  28. Microsoft Edge for Android Security Feature Bypass Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  29. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  30. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 09:00 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.