Weekly briefing
Week 27 · 30 Jun – 6 Jul 2025 UTC · assess the changes, then plan the next dates.
Act on2
-
Google Chromium V8 Type Confusion Vulnerability
CVE-2025-6554
-
Edge 138.0.3351.65: fixes CVE-2025-6554, exploited in the wild
Microsoft Edge security release notes
Coming up8
-
Patch Tuesday, 8 July 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft SharePoint Code Injection Vulnerability
CVE-2025-49704
Same day: CISA KEV deadline: Microsoft SharePoint Improper Authentication Vulnerability
-
MC1002399: Microsoft Purview: Classic eDiscovery experience will retireMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1062447: Microsoft Fabric: Changes to tenant admin setting that governs the access of service principals to public APIs; Message Center action date: MC1066336: Plan for Change: Updates to required permissions for Microsoft Graph Beta API deviceManagement; Message Center action date: MC1107490: Reminder: Updates to required permissions for Microsoft Graph Beta API deviceManagement; Message Center action date: MC1119406: New Outlook for Windows and Web: Outlook Newsletters – General Availability begins for Targeted Release
-
MC1042929: Prevent/Fix - Microsoft Purview: HR Connector new sample power shell scriptMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1059667: Action required: Classic Microsoft Teams end of availability starts July 1, 2025; Message Center action date: MC1085569: Microsoft Teams: Upgrade to Meeting Recording Organizer Policy by 30 June 2025; Message Center action date: MC1089315: Resharing to external users required after enabling Microsoft SharePoint integration with Microsoft Entra B2B
Changed2
-
[FIXED] Certain users enrolled in the Microsoft 365 Insiders Program cannot launch classic Outlook for Windows
Classic Outlook known issues
How this list is chosen
Changes from 30 Jun 2025 – 6 Jul 2025 UTC and dates due up to 5 Aug 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.