WEEKLY BRIEFING · 12 MAY – 18 MAY 2025 · UTC
Full source inventory · public sources only
Week 20 sources
Microsoft published 3 Windows KB releases (3 security). MSRC published May 2025 Security Updates. 3 roadmap changes, led by Teams (2) and Microsoft 365 Admin Center (1). CISA added 5 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 12 Azure updates, including 1 retirement. 2 Windows and security articles from Microsoft blogs.
3Windows KB releases
1MSRC release note
3Roadmap changes across 2 products
2Windows and security articles
5Microsoft CVEs added to CISA KEV
Security to act on5
- CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityKEV 13 May
- CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityKEV 13 May
- CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityKEV 13 May
- CVE-2025-30400 — Microsoft Windows DWM Core Library Use-After-Free VulnerabilityKEV 13 May
- CVE-2025-30397 — Microsoft Windows Scripting Engine Type Confusion VulnerabilityKEV 13 May
Windows releases3
MSRC security releases1
Windows and security news2
Product news13
Microsoft Graph · 10
- People and workplace intelligence (beta): 3 API change passages16 May
- Device and app management (beta): 5 API change passages16 May
- Teamwork (beta): 1 API change passage15 May
7 more
- Teamwork (v1.0): 1 API change passage15 May
- Calendars (v1.0): 2 API change passages14 May
- Identity and access (v1.0): 4 API change passages13 May
- Security (beta): 32 API change passages13 May
- Reports (beta): 3 API change passages13 May
- Identity and access (v1.0): 2 API change passages13 May
- Education (beta): 1 API change passage12 May
GitLab · 1
- GitLab 18.015 May
Microsoft Entra · 1
Microsoft Graph PowerShell SDK · 1
Azure updates12
- Generally Available: Azure NetApp Files cross-zone and cross-region replication across subscriptions16 May
- Generally Available: Carbon optimization in Azure16 May
- Public Preview: Azure NetApp Files cross-zone-region replication (CZRR)16 May
- Generally Available: Azure File Sync in Italy North16 May
- Generally Available: App Service Webjobs on Linux14 May
7 more
- Public Preview: MongoDB Atlas—an Azure Native Integration14 May
- Generally Available: Azure Premium SSD v2 Disk Storage is now available in Japan West14 May
- Public Preview: Azure Virtual Network Manager high-scale private endpoints in connected groups13 May
- Generally Available: Azure App Configuration now offers a Developer pricing plan13 May
- Public Preview: Perth - Azure Extended Zones13 May
- Retirement: Bing Search APIs on August 11, 202512 May
- Generally Available: Azure NetApp Files support for Active Directory connection per NetApp account12 May
From the community1
- Maester adds ORCA tests12 May
Microsoft 365 roadmap3
Teams · 2
- Microsoft Teams: Ability to Stop Copilot while it is generating a response16 May
- Microsoft Teams: Presenter Chat while screensharing16 May
Microsoft 365 Admin Center · 1
Other public updates30
- Power Automate – Enable endpoint filtering for secure UI automation18 May
- Power Apps - Makers can select from existing apps when using the plan designer18 May
- Microsoft Teams: Set New Ringtones in Teams Mobile16 May
- Default XMLA configuration for Fabric and Power BI capacities changes to Read/Write16 May
- Call Waiting Beep Enabled on Desktop and Mobile16 May
25 more
- OneDrive: Prompt for permitted users to sign in to OneDrive app with personal Microsoft account16 May
- Microsoft Purview | Insider Risk Management: Updated user scoping features in policies16 May
- Microsoft 365 admin center: Onboard SharePoint agents as a Pay-as-you-go scenario16 May
- Microsoft Viva Insights: People Skills insights for analysts16 May
- Dynamics 365 Project Operations - Use integration troubleshooting for modern projects feature16 May
- Power Automate - Generate process maps for multi-flow automations15 May
- Dynamics 365 Project Operations - Post project cost for the procurement category upon product receipt15 May
- Dynamics 365 Project Operations- Project cost for service items and procurement categories with item requirements15 May
- Microsoft OneDrive: Export files as PDF14 May
- Microsoft Purview | Insider Risk Management: Custom Communication Compliance policy as IRM indicator14 May
- Microsoft SharePoint: Dashboard web part will be available for all sites14 May
- Updates available for Microsoft 365 Apps for all channels14 May
- Microsoft 365 Copilot: Access agents from the Microsoft Edge sidebar13 May
- Microsoft Power BI: Tenant setting changes for Microsoft Azure Maps in Power BI13 May
- Microsoft Defender for Identity: We will disable collection of local administrators' group members (using SAM-R)13 May
- SharePoint Alerts retirement13 May
- Microsoft Outlook for iOS: Updated conversation actions12 May
- Microsoft SharePoint: Storage insights will be included in Microsoft 365 admin center usage reports12 May
- Microsoft Edge for Business: New PDF viewer powered by Adobe engine now available for testing in Edge Beta12 May
- Microsoft Excel: Organization data types will retire12 May
- New Microsoft Outlook and Outlook for the web: Admin setting for inheriting a S/MIME signature on reply12 May
- Microsoft Viva Insights | Copilot Analytics: Unified experience for Copilot Dashboard and Insights analyst workbench12 May
- Microsoft Purview | Data Loss Prevention: New “Enterprise AI apps” option in collection policies (Preview)12 May
- Power Automate - Fix save errors in your cloud or agent flow with Copilot12 May
- Microsoft Viva Engage: Centralized admin role management from the Engage admin center12 May
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.