Weekly briefing

Week 11 · 10 Mar – 16 Mar 2025 UTC · assess the changes, then plan the next dates.

What to assess first

10 Mar – 16 Mar · dates to 15 Apr Check coverage

Act on2

13Mar
Exploited13 Mar 2025
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
CVE-2025-24201
Related evidence (1)
- Edge 134.0.3124.62: fixes CVE-2025-24201, exploited in the wild
  Public source · Shared CVE CVE-2025-24201
11Mar
Exploited11 Mar 2025
Edge 134.0.3124.62: fixes CVE-2025-24201, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
  Public source · Shared CVE CVE-2025-24201
- Edge 134.0.3124.68: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 134.0.3124.66: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 134.0.3124.51: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes
- Edge 133.0.3065.82: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge Extended Stable 132.0.2957.171: Chromium security fixes and 4 Edge-specific fixes
  Public source · Same source page; the statements may concern different changes

Coming up4

18Mar
CISA KEV deadlineDue 18 Mar 2025
Microsoft Partner Center Improper Access Control Vulnerability
CVE-2024-49035
24Mar
CISA KEV deadlineDue 24 Mar 2025
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2018-8639
1Apr
CISA KEV deadlineDue 1 Apr 2025
Microsoft Windows Win32k Use-After-Free Vulnerability
CVE-2025-24983
Same day: CISA KEV deadline: Microsoft Windows NTFS Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability; CISA KEV deadline: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
8Apr
Patch TuesdayScheduled for 8 Apr 2025
Patch Tuesday, 8 April 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed2

12Mar
Security12 Mar 2025
GitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7
GitLab patch releases
11Mar
Security11 Mar 2025
March 2025 Security Updates
Microsoft Security Update Guide

How this list is chosen

Changes from 10 Mar 2025 – 16 Mar 2025 UTC and dates due up to 15 Apr 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.