Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
Threads
Related changes across sources- Release 2024-09-18 Advisory content revised: When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to …2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2024-09-18 Advisory content revised: When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory c…2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1536049: Microsoft Entra ID: Microsoft-provided SMS and voice authentication to retire for self-service password reset (SSPR) Community post: Entra 🆔 News #174 → This week in Microsoft Entra2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1540327: Action required: Prepare users who can’t use passkeys for SMS and voice retirement Community post: Entra 🆔 News #174 → This week in Microsoft Entra2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-07-17 Advisory content revised: containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may…3 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-04-02 Advisory content revised: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, …3 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-07-17 Advisory content revised: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0…3 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1221452: (Update)Microsoft Entra ID: General Availability of passkey profiles and migration for existing Passkeys (FIDO2) tenants Community post: Entra 🆔 News #173 → This week in Microsoft Entra3 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-05-29 Advisory content revised: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-05-29 Advisory content revised: The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruptio…2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-05-29 Advisory content revised: tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-05-29 Advisory content revised: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track …2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1465763: Microsoft Entra: Prepare for Microsoft to disable unused or unsuccessful SMS first-factor sign-in Community post: Entra 🆔 News #173 → This week in Microsoft Entra2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1518029: Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice authentication Community post: Entra 🆔 News #173 → This week in Microsoft Entra2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1528000: Microsoft Entra ID: Reminder to migrate from Microsoft-provided SMS and voice authentication Community post: Entra 🆔 News #173 → This week in Microsoft Entra2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Release 2026-07-17 Advisory content revised: containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a containe…2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1429018: (Updated) Microsoft Teams: Meeting memory file generation Notice updated2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1448379: Microsoft Entra ID: Replace MemberOf rules by November 3, 2026 Message Center · Plan for change: MC1529463: Microsoft Entra ID: Final reminder to replace MemberOf rule operator configurations by November 3, 20265 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1481313: (Updated) Microsoft Purview | DLM: Legacy Teams retention policies that cover Copilot will be treated as Teams-only Notice updated2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1492954: Microsoft Outlook: Themes by Copilot retirement Community post: Microsoft Revamps Purview Retention Policies for Copilot2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1469565: Microsoft Purview | Data Lifecycle Management - Graph API Support for archive mailboxes Notice updated2 linked entries across history · across 2 areas Follow evidence and connection reasons
- MC1479514: (Updated) Microsoft Teams: Improved file sharing experience in external chats Notice updated2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Microsoft Office Excel Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Microsoft Office Excel Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Microsoft Office Excel Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Microsoft Graphics Component Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Microsoft QUIC Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons
- Windows Media Video Decoder Remote Code Execution Vulnerability Published vulnerability2 linked entries across history · across 2 areas Follow evidence and connection reasons