Weekly briefing

Week 47 · 17 Nov – 23 Nov 2025 UTC · assess the changes, then plan the next dates.

What to assess first

17 Nov – 23 Nov · dates to 23 Dec Check coverage

Act on3

19Nov
Exploited19 Nov 2025
Google Chromium V8 Type Confusion Vulnerability
CVE-2025-13223
Related evidence (1)
- Edge 142.0.3595.90: fixes CVE-2025-13223, exploited in the wild
  Public source · Shared CVE CVE-2025-13223
18Nov
Exploited18 Nov 2025
Fortinet FortiWeb OS Command Injection Vulnerability
CVE-2025-58034
18Nov
Exploited18 Nov 2025
Edge 142.0.3595.90: fixes CVE-2025-13223, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Google Chromium V8 Type Confusion Vulnerability
  Public source · Shared CVE CVE-2025-13223
- Edge 142.0.3595.80: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 142.0.3595.65: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 142.0.3595.53: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes
- Edge 141.0.3537.85: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 141.0.3537.71: Chromium security fixes
  Public source · Same source page; the statements may concern different changes

Coming up8

27Nov
Message Center action dateDue 27 Nov 2025
MC1180889: Microsoft Viva Insights: Retirement of Export via Microsoft Graph Data Connect (MGDC)Microsoft 365 Message Center Archive by Merill Fernando
1Dec
Message Center action dateDue 1 Dec 2025
MC1147982: Action Required: Update firewall configurations to include new Intune network endpointsMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1150664: Action Required: Update firewall configurations to include new network endpoints
2Dec
Message Center action dateDue 2 Dec 2025
MC1183282: Reminder: Update firewall configurations to include new network endpointsMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1183289: Reminder: Update firewall configurations to include new Intune network endpoints
3Dec
CISA KEV deadlineDue 3 Dec 2025
Microsoft Windows Race Condition Vulnerability
CVE-2025-62215
7Dec
Message Center action dateDue 7 Dec 2025
MC1182535: Retirement of Visio Data Visualizer Add-in for Microsoft ExcelMicrosoft 365 Message Center Archive by Merill Fernando
9Dec
Patch TuesdayScheduled for 9 Dec 2025
Patch Tuesday, 9 December 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
15Dec
Message Center action dateDue 15 Dec 2025
MC1185442: Decoupling admin controls for agents on/off from Researcher and AnalystMicrosoft 365 Message Center Archive by Merill Fernando
17Nov
Message Center action dateDue 17 Nov 2025
MC1176301: Action Required – Domain Setup for Custom HTML Templates in Teams Events Email NotificationsMicrosoft 365 Message Center Archive by Merill Fernando

Changed1

21Nov
Security21 Nov 2025
WAF - WAF Release - 2025-11-21
Cloudflare WAF changelog

How this list is chosen

Changes from 17 Nov 2025 – 23 Nov 2025 UTC and dates due up to 23 Dec 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.