Edge 136.0.3240.76: fixes CVE-2025-4664, exploited in the wild
Security advisory · Microsoft Edge security release notes
Assessment context
The vendor reports an exploit in the wild
Weekly briefing
Week 20 · 12 May – 18 May 2025 UTC · assess the changes, then plan the next dates.
All dated changes in this period
11 source records · 7 groupsSecurityFortinet
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2025-32756
Assessment context
CISA lists it as exploited
Message CenterDefender
MC1057719: MDE Mobile: Open Wi-Fi and Certificate Detections will be logged as Events
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Message CenterDefender
MC940078: Upcoming changes to Defender for Identity activities and alerts in Defender for Cloud Apps experiences
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change
SecurityMicrosoft Security Update Guide
May 2025 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
SecurityWindows5 source records
Added to CISA KEV · 5 entries
- Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Added to CISA KEV
CVE-2025-32709
Assessment context
CISA lists it as exploited
- Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Added to CISA KEV
CVE-2025-32706
Assessment context
CISA lists it as exploited
- Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Added to CISA KEV
CVE-2025-32701
Assessment context
CISA lists it as exploited
Show the other 2 entries
- Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Added to CISA KEV
CVE-2025-30400
Assessment context
CISA lists it as exploited
- Microsoft Windows Scripting Engine Type Confusion Vulnerability
Added to CISA KEV
CVE-2025-30397
Assessment context
CISA lists it as exploited
SecurityVMware Tools
VMSA-2025-0007: VMware Tools update addresses an insecure file handling vulnerability (CVE-2025-22247)
Security advisory · VMware security advisories (Broadcom)
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.