Weekly briefing

Week 10 · 3 Mar – 9 Mar 2025 UTC · assess the changes, then plan the next dates.

What to assess first

3 Mar – 9 Mar · dates to 8 Apr Check coverage

Act on4

4Mar
Exploited4 Mar 2025
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2025-22224
Related evidence (3)
- VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)
  Public source · Shared CVE CVE-2025-22224
- VMware ESXi Arbitrary Write Vulnerability
  Public source · Same source page; the statements may concern different changes
- VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
  Public source · Same source page; the statements may concern different changes
4Mar
Exploited4 Mar 2025
VMware ESXi Arbitrary Write Vulnerability
CVE-2025-22225
Related evidence (3)
- VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)
  Public source · Shared CVE CVE-2025-22225
- VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
  Public source · Same source page; the statements may concern different changes
- VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
  Public source · Same source page; the statements may concern different changes
4Mar
Security4 Mar 2025
VMware ESXi / VMware Fusion / VMware Workstation · 2 security records
CVE-2025-22226
Related evidence (3)
- VMSA-2025-0004: VMware ESXi, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)
  Public source · Shared CVE CVE-2025-22226
- VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
  Public source · Same source page; the statements may concern different changes
- VMware ESXi Arbitrary Write Vulnerability
  Public source · Same source page; the statements may concern different changes
3Mar
Exploited3 Mar 2025
Cisco Small Business RV Series Routers Command Injection Vulnerability
CVE-2023-20118

Coming up4

11Mar
Patch TuesdayScheduled for 11 Mar 2025
Patch Tuesday, 11 March 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
14Mar
CISA KEV deadlineDue 14 Mar 2025
Microsoft Power Pages Improper Access Control Vulnerability
CVE-2025-24989
18Mar
CISA KEV deadlineDue 18 Mar 2025
Microsoft Partner Center Improper Access Control Vulnerability
CVE-2024-49035
24Mar
CISA KEV deadlineDue 24 Mar 2025
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2018-8639

How this list is chosen

Changes from 3 Mar 2025 – 9 Mar 2025 UTC and dates due up to 8 Apr 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.