WEEKLY BRIEFING · 14 JUL – 20 JUL 2025 · UTC Public sources only

6 public updates in week 29

No new MSRC release that week. 2 roadmap changes, led by Microsoft 365 Copilot (2). CISA added 1 Microsoft CVE to its Known Exploited Vulnerabilities catalog. 3 Windows and security articles from Microsoft blogs.

0Windows KB releases

0MSRC release notes

2Roadmap changes across 1 product

3Windows and security articles

1Microsoft CVEs added to CISA KEV

Security to act on1

CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEV 20 Jul

Windows and security news3

Hotpatching for Azure Arc–Connected Servers: General Availability and Subscription Details16 Jul
Oracle Critical Patch Update Advisory - July 202515 Jul
VMSA-2025-0013: VMware ESXi, Workstation, Fusion, and Tools updates address multiple vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239)15 Jul

From the community1

Attending EUC World 2025 Amplify event in Minneapolis?14 Jul

Microsoft 365 roadmap2

Microsoft 365 Copilot · 2

Microsoft Copilot (Microsoft 365): Researcher is in Microsoft Word17 Jul
Microsoft Copilot (Microsoft 365): Copilot surfaces key statistics in the top of a document16 Jul

Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.