Weekly briefing

Week 20 · 12 May – 18 May 2025 UTC · assess the changes, then plan the next dates.

What to assess first

12 May – 18 May · dates to 17 Jun Check coverage

Act on2

15May
Exploited15 May 2025
Edge 136.0.3240.76: fixes CVE-2025-4664, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Edge 136.0.3240.64: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 136.0.3240.50: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes
- Edge 135.0.3179.98: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 135.0.3179.85: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 135.0.3179.73: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes
- Edge 135.0.3179.54: Chromium security fixes and 2 Edge-specific fixes
  Public source · Same source page; the statements may concern different changes
14May
Exploited14 May 2025
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
CVE-2025-32756

Coming up4

26May
Message Center action dateDue 26 May 2025
MC1064044: Limited Microsoft Planner Functionality for Shared Mailbox UsersMicrosoft 365 Message Center Archive by Merill Fernando
1Jun
Message Center action dateDue 1 Jun 2025
MC1036575: Microsoft Viva Engage: External Networks are being modernizedMicrosoft 365 Message Center Archive by Merill Fernando
3Jun
CISA KEV deadlineDue 3 Jun 2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
CVE-2025-30397
Same day: CISA KEV deadline: Microsoft Windows DWM Core Library Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
10Jun
Patch TuesdayScheduled for 10 Jun 2025
Patch Tuesday, 10 June 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed4

13May
Security13 May 2025
May 2025 Security Updates
Microsoft Security Update Guide
13May
Security13 May 2025
Windows · 5 security records
CVE-2025-30397
13May
Release13 May 2025
Windows Server · 3 releases
Windows Server 2016
13May
Revised13 May 2025
MC940078: Upcoming changes to Defender for Identity activities and alerts in Defender for Cloud Apps experiencesMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Related evidence (1)
- MC1024406: [Reminder] Microsoft Defender for Cloud Apps: Change to Microsoft Entra ID Protection alertsMicrosoft 365 Message Center Archive by Merill Fernando
  Public source · Shared Message Center ID MC940078

How this list is chosen

Changes from 12 May 2025 – 18 May 2025 UTC and dates due up to 17 Jun 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.