Weekly briefing

Week 13 · 24 Mar – 30 Mar 2025 UTC · assess the changes, then plan the next dates.

What to assess first

24 Mar – 30 Mar · dates to 29 Apr Check coverage

Act on2

27Mar
Exploited27 Mar 2025
Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2025-2783
Related evidence (1)
- Edge 134.0.3124.93: fixes CVE-2025-2783, exploited in the wild
  Public source · Shared CVE CVE-2025-2783
26Mar
Exploited26 Mar 2025
Edge 134.0.3124.93: fixes CVE-2025-2783, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Google Chromium Mojo Sandbox Escape Vulnerability
  Public source · Shared CVE CVE-2025-2783
- Edge 134.0.3124.83: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 134.0.3124.68: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 134.0.3124.66: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 134.0.3124.62: fixes CVE-2025-24201, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 134.0.3124.51: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes

Coming up4

1Apr
CISA KEV deadlineDue 1 Apr 2025
Microsoft Windows Win32k Use-After-Free Vulnerability
CVE-2025-24983
Same day: CISA KEV deadline: Microsoft Windows NTFS Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability; CISA KEV deadline: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
8Apr
Patch TuesdayScheduled for 8 Apr 2025
Patch Tuesday, 8 April 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
29Apr
CISA KEV deadlineDue 29 Apr 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
CVE-2025-29824
24Mar
CISA KEV deadlineDue 24 Mar 2025
Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2018-8639

Changed1

25Mar
Security25 Mar 2025
VMSA-2025-0005: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230)
VMware security advisories (Broadcom)

How this list is chosen

Changes from 24 Mar 2025 – 30 Mar 2025 UTC and dates due up to 29 Apr 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.