Weekly briefing
Week 47 · 22 Nov – 28 Nov 2021 UTC · assess the changes, then plan the next dates.
Coming up2
-
Microsoft Windows Win32k Privilege Escalation Vulnerability
CVE-2021-40449
Same day: CISA KEV deadline: Microsoft Excel Security Feature Bypass; CISA KEV deadline: Microsoft Exchange Server Remote Code Execution Vulnerability
-
Patch Tuesday, 14 December 2021
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
How this list is chosen
Changes from 22 Nov 2021 – 28 Nov 2021 UTC and dates due up to 28 Dec 2021. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.