Weekly briefing
Week 10 · 3 Mar – 9 Mar 2025 UTC · assess the changes, then plan the next dates.
All dated changes in this period
18 source records · 13 groupsRoadmapSharePoint2 source records
Roadmap entry · 2 entries
- SharePoint: Design Ideas Suggests Images from Org Assets
Roadmap entry · Microsoft 365 Roadmap
- SharePoint: Design Ideas for Blank Flexible Sections
Roadmap entry · Microsoft 365 Roadmap
SecurityMicrosoft Edge
Edge 134.0.3124.51: Chromium security fixes and 1 Edge-specific fix
Security advisory · Microsoft Edge security release notes
RoadmapViva
Microsoft Viva: Viva Amplify - Animated GIFs in email
Roadmap entry · Microsoft 365 Roadmap
SecurityVMware ESXi / VMware Fusion / VMware Workstation2 source records
VMware · exploited, added to CISA KEV · 2 entries
- VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
VMware · exploited, added to CISA KEV
CVE-2025-22226
Assessment context
CISA lists it as exploited
- VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it critical
SecurityVMware ESXi / VMware Workstation
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
VMware · exploited, added to CISA KEV
CVE-2025-22224
Assessment context
CISA lists it as exploited
SecurityVMware ESXi
VMware ESXi Arbitrary Write Vulnerability
VMware · exploited, added to CISA KEV
CVE-2025-22225
Assessment context
CISA lists it as exploited, including by ransomware
ReleasesAzure CLI2 source records
Tool release · 2 entries
- Azure CLI 2.66.1
Tool release · Azure CLI release notes
Assessment context
Release notes mention breaking changes · Release notes name CVE-2024-50602, CVE-2024-12797
Notes mention breaking changesCVE-2024-50602CVE-2024-127973 release-note bullets- Resolve CVE-2024-50602 (#30567)
- Resolve CVE-2024-12797 (#30819)
- BREAKING CHANGE: az login: --password no longer accepts a service principal certificate. Use --certificate to pass a service principal certificate (#30540)
ReleasesVMware ESXi
VMware ESXi · 8.0: 8.0 Update 3d (Build 24585383)
New version · VMware ESXi releases
RoadmapMicrosoft 365 Apps / Microsoft 365 Copilot2 source records
Roadmap entry · 2 entries
- Microsoft Copilot (Microsoft 365): Copilot takes emails and meetings into account while drafting content in Word
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Copilot (Microsoft 365): Create the perfect banner for your document with Copilot and Designer
Roadmap entry · Microsoft 365 Roadmap
SecurityWindows2 source records
CISA KEV deadline · 2 entries
- Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
CISA KEV deadline
CVE-2025-21418
Assessment context
CISA deadline passed 601 days ago
- Microsoft Windows Storage Link Following Vulnerability
CISA KEV deadline
CVE-2025-21391
Assessment context
CISA deadline passed 601 days ago
SecurityCisco
Cisco Small Business RV Series Routers Command Injection Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2023-20118
Assessment context
CISA lists it as exploited
SecurityWindows
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Added to CISA KEV
CVE-2018-8639
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.