ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. January 2016 Patch Tuesday Security release: KB3124263 · Windows 10, version 15112 linked entries across history · in Windows Follow evidence and connection reasons
  2. December 2015 Patch Tuesday Security release: KB3116869 · Windows 10, version 1507 (RTM)2 linked entries across history · in Windows Follow evidence and connection reasons
  3. November 2015 Patch Tuesday Security release: KB3105211 · Windows 10, version 15112 linked entries across history · in Windows Follow evidence and connection reasons
  4. August 2015 Patch Tuesday Out-of-band release: KB3081438 · Windows 10, version 1507 (RTM)2 linked entries across history · in Windows Follow evidence and connection reasons
  5. Windows 11, version 26H2 Security baseline: Windows 11 v26H2 Security Baseline v2.zip14 linked entries across history · across 6 areas Follow evidence and connection reasons
  6. Windows 11, version 24H2 Security baseline: Windows 11 v24H2 Security Baseline.zip9 linked entries across history · across 5 areas Follow evidence and connection reasons
  7. Release Notes - 2026-03-05 Advisory content revised: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may ha…6 linked entries across history · across 2 areas Follow evidence and connection reasons
  8. Release 2026-05-29 Advisory content revised: If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS …6 linked entries across history · across 2 areas Follow evidence and connection reasons
  9. Release 2026-05-29 Advisory content revised: On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignor…5 linked entries across history · across 2 areas Follow evidence and connection reasons
  10. Release Notes - 2026-03-05 Advisory content revised: archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.2 linked entries across history · across 2 areas Follow evidence and connection reasons
  11. MC1540345: Action required: Update permissions for Exchange Online Admin API Community post: Microsoft Revamps Exchange Online Admin API Permissions2 linked entries across history · across 2 areas Follow evidence and connection reasons
  12. Active Directory Federation Services (AD FS) Spoofing Vulnerability Advisory content revised: Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.5 linked entries across history · across 2 areas Follow evidence and connection reasons
  13. Microsoft QUIC Remote Code Execution Vulnerability Advisory content revised: Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.4 linked entries across history · across 2 areas Follow evidence and connection reasons
  14. Release 2025-04-27 Advisory content revised: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.4 linked entries across history · across 2 areas Follow evidence and connection reasons
  15. MC1446796: (Updated) Migrate Free/Busy, MailTips, and Calendar Sharing before EWS deprecation Notice updated4 linked entries across history · across 2 areas Follow evidence and connection reasons
  16. Release 2025-03-16 Advisory content revised: Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call …3 linked entries across history · across 2 areas Follow evidence and connection reasons
  17. Release Notes - 2026-03-05 Advisory content revised: The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can par…3 linked entries across history · across 2 areas Follow evidence and connection reasons
  18. Release 2024-09-18 Advisory content revised: Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven o…2 linked entries across history · across 2 areas Follow evidence and connection reasons
  19. Release 2024-09-18 Advisory content revised: The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using…2 linked entries across history · across 2 areas Follow evidence and connection reasons
  20. Release 2024-09-18 Advisory content revised: If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templa…2 linked entries across history · across 2 areas Follow evidence and connection reasons
  21. dbatools 2.5.0 Advisory content revised: .NET and Visual Studio Remote Code Execution Vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
  22. Release 2025-01-30 Advisory content revised: Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.2 linked entries across history · across 2 areas Follow evidence and connection reasons
  23. Release 2025-01-30 Advisory content revised: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.2 linked entries across history · across 2 areas Follow evidence and connection reasons
  24. dbatools 2.5.0 Advisory content revised: .NET and Visual Studio Remote Code Execution Vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
  25. dbatools 2.5.0 Advisory content revised: .NET and Visual Studio Remote Code Execution Vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
  26. Release 2025-10-12 Advisory content revised: runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the sourc…2 linked entries across history · across 2 areas Follow evidence and connection reasons
  27. Release 2025-10-12 Advisory content revised: runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pt…2 linked entries across history · across 2 areas Follow evidence and connection reasons
  28. Release 2026-02-08 Advisory content revised: Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime.…2 linked entries across history · across 2 areas Follow evidence and connection reasons
  29. dbatools 2.5.0 Advisory content revised: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
  30. Release 2024-09-18 Advisory content revised: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connec…2 linked entries across history · across 2 areas Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 11:05 UTC · 270 of 275 readable · 268 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.