Weekly briefing

Week 44 · 27 Oct – 2 Nov 2025 UTC · assess the changes, then plan the next dates.

What to assess first

27 Oct – 2 Nov · dates to 2 Dec Check coverage

Act on1

30Oct
Exploited30 Oct 2025
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
CVE-2025-41244
Related evidence (1)
- VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
  Public source · Shared CVE CVE-2025-41244

Coming up8

4Nov
CISA KEV deadlineDue 4 Nov 2025
Microsoft Windows Untrusted Pointer Dereference Vulnerability
CVE-2025-24990
Same day: CISA KEV deadline: Microsoft Windows Improper Access Control Vulnerability
10Nov
CISA KEV deadlineDue 10 Nov 2025
Microsoft Windows SMB Client Improper Access Control Vulnerability
CVE-2025-33073
11Nov
Patch TuesdayScheduled for 11 Nov 2025
Patch Tuesday, 11 November 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
11Nov
Message Center action dateDue 11 Nov 2025
MC1183612: Action Required to Enable Extended Security Update for local devices accessing Windows 365Microsoft 365 Message Center Archive by Merill Fernando
14Nov
CISA KEV deadlineDue 14 Nov 2025
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
CVE-2025-59287
Related evidence (1)
- WAF - WAF Release - 2025-10-24 - Emergency
  Public source · Shared CVE CVE-2025-59287
15Nov
Message Center action dateDue 15 Nov 2025
MC1174855: Update to inline image representation in Outlook on the web and new Outlook for WindowsMicrosoft 365 Message Center Archive by Merill Fernando
17Nov
Message Center action dateDue 17 Nov 2025
MC1176301: Action Required – Domain Setup for Custom HTML Templates in Teams Events Email NotificationsMicrosoft 365 Message Center Archive by Merill Fernando
27Nov
Message Center action dateDue 27 Nov 2025
MC1180889: Microsoft Viva Insights: Retirement of Export via Microsoft Graph Data Connect (MGDC)Microsoft 365 Message Center Archive by Merill Fernando

Changed3

30Oct
Security30 Oct 2025
WAF - WAF Release - 2025-10-30 - Emergency
Cloudflare WAF changelog
Related evidence (3)
- Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
  Public source · Shared CVE CVE-2025-61884
- Oracle Security Alert for CVE-2025-61884 - 11 October 2025
  Public source · Shared CVE CVE-2025-61884
- Oracle Security Alert CVE-2025-61884
  Public source · Shared CVE CVE-2025-61884
30Oct
Release30 Oct 2025
Az PowerShell module 14.6.0
Az PowerShell module releases
Related evidence (2)
- Az PowerShell module 14.5.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Az PowerShell module 14.4.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
31Oct
Revised31 Oct 2025
MC678003: Microsoft Teams Live Event RetirementMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft Teams

How this list is chosen

Changes from 27 Oct 2025 – 2 Nov 2025 UTC and dates due up to 2 Dec 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.