WAF - WAF Release - 2025-09-28 - Emergency
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-20363, CVE-2025-20333, CVE-2025-20362
CVE-2025-20363CVE-2025-20333CVE-2025-20362
Weekly briefing
Week 39 · 22 Sep – 28 Sep 2025 UTC · assess the changes, then plan the next dates.
All dated changes in this period
9 source records · 8 groupsSecurityCloudflare
SecurityCisco2 source records
Cisco · exploited, added to CISA KEV · 2 entries
- Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2025-20362
Assessment context
CISA lists it as exploited
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2025-20333
Assessment context
CISA lists it as exploited
SecurityGitLab
GitLab Patch Release: 18.4.1, 18.3.3, 18.2.7
Security advisory · GitLab patch releases
SecurityMicrosoft Edge
Edge 140.0.3485.94: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityCloudflare
WAF - WAF Release - 2025-09-24 - Emergency
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-10035
CVE-2025-10035
SecurityGoogle Chrome
Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2025-10585
Assessment context
CISA lists it as exploited
SecurityCloudflare
WAF - WAF Release - 2025-09-22
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-54914, CVE-2025-49619
CVE-2025-54914CVE-2025-49619
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.