Microsoft Power Pages Improper Access Control Vulnerability
CISA KEV deadline
CVE-2025-24989
Assessment context
CISA deadline passed 591 days ago
Weekly briefing
Week 11 · 10 Mar – 16 Mar 2025 UTC · assess the changes, then plan the next dates.
All dated changes in this period
13 source records · 8 groupsSecurityiOS and iPadOS / macOS
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
Apple · exploited, added to CISA KEV
CVE-2025-24201
Assessment context
CISA lists it as exploited
SecurityMicrosoft Edge
Edge 134.0.3124.68: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityGitLab
GitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7
Security advisory · GitLab patch releases
Assessment context
The vendor rates it critical
SecurityMicrosoft Edge
Edge 134.0.3124.66: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityMicrosoft Edge
Edge 134.0.3124.62: fixes CVE-2025-24201, exploited in the wild
Security advisory · Microsoft Edge security release notes
Assessment context
The vendor reports an exploit in the wild
SecurityMicrosoft Security Update Guide
March 2025 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
SecurityWindows6 source records
Added to CISA KEV · 6 entries
- Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Added to CISA KEV
CVE-2025-24985
Assessment context
CISA lists it as exploited
- Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Added to CISA KEV
CVE-2025-26633
Assessment context
CISA lists it as exploited
- Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Added to CISA KEV
CVE-2025-24993
Assessment context
CISA lists it as exploited
Show the other 3 entries
- Microsoft Windows NTFS Information Disclosure Vulnerability
Added to CISA KEV
CVE-2025-24984
Assessment context
CISA lists it as exploited
- Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Added to CISA KEV
CVE-2025-24991
Assessment context
CISA lists it as exploited
- Microsoft Windows Win32k Use-After-Free Vulnerability
Added to CISA KEV
CVE-2025-24983
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.