Weekly briefing

Week 29 · 14 Jul – 20 Jul 2025 UTC · assess the changes, then plan the next dates.

What to assess first

14 Jul – 20 Jul · dates to 19 Aug Check coverage

Act on2

18Jul
Exploited18 Jul 2025
Fortinet FortiWeb SQL Injection Vulnerability
CVE-2025-25257
16Jul
Exploited16 Jul 2025
Edge 138.0.3351.95: fixes CVE-2025-6558, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Edge 138.0.3351.65: fixes CVE-2025-6554, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 138.0.3351.55: Chromium security fixes and 3 Edge-specific fixes
  Public source · Same source page; the statements may concern different changes
- Edge 137.0.3296.93: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 137.0.3296.83: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge Extended Stable 136.0.3240.115: fixes CVE-2025-5419, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 137.0.3296.62: fixes CVE-2025-5419, exploited in the wild
  Public source · Same source page; the statements may concern different changes

Coming up6

21Jul
CISA KEV deadlineDue 21 Jul 2025
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2025-53770
23Jul
CISA KEV deadlineDue 23 Jul 2025
Microsoft SharePoint Code Injection Vulnerability
CVE-2025-49704
Same day: CISA KEV deadline: Microsoft SharePoint Improper Authentication Vulnerability
30Jul
Message Center action dateDue 30 Jul 2025
MC1088732: Microsoft Teams: Important updates for Android-based Teams devices – Authentication changes coming soonMicrosoft 365 Message Center Archive by Merill Fernando
31Jul
Message Center action dateDue 31 Jul 2025
MC1002399: Microsoft Purview: Classic eDiscovery experience will retireMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1062447: Microsoft Fabric: Changes to tenant admin setting that governs the access of service principals to public APIs; Message Center action date: MC1066336: Plan for Change: Updates to required permissions for Microsoft Graph Beta API deviceManagement; Message Center action date: MC1107490: Reminder: Updates to required permissions for Microsoft Graph Beta API deviceManagement; Message Center action date: MC1119406: New Outlook for Windows and Web: Outlook Newsletters – General Availability begins for Targeted Release
12Aug
Patch TuesdayScheduled for 12 Aug 2025
Patch Tuesday, 12 August 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
14Aug
Message Center action dateDue 14 Aug 2025
MC1101895: Microsoft Entra ID access reviews: Updated historical data retention policy for access reviewsMicrosoft 365 Message Center Archive by Merill Fernando

Changed3

20Jul
Security20 Jul 2025
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2025-53770
15Jul
Security15 Jul 2025
VMSA-2025-0013: VMware ESXi, Workstation, Fusion, and Tools updates address multiple vulnerabilities (CVE-2025-41236, CVE-2025-41237, CVE-2025-41238, CVE-2025-41239)
VMware security advisories (Broadcom)
18Jul
Revised18 Jul 2025
MC1020219: Agents in Microsoft 365 Copilot Chat in OutlookMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft 365 for the web, Microsoft 365 apps

How this list is chosen

Changes from 14 Jul 2025 – 20 Jul 2025 UTC and dates due up to 19 Aug 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.