Weekly briefing

Week 49 · 1 Dec – 7 Dec 2025 UTC · assess the changes, then plan the next dates.

What to assess first

1 Dec – 7 Dec · dates to 6 Jan Check coverage

Act on1

2Dec
Security2 Dec 2025
Android · 2 security records
CVE-2025-48572
Related evidence (1)
- Android Framework Information Disclosure Vulnerability
  Public source · Same source page; the statements may concern different changes

Coming up8

9Dec
Patch TuesdayScheduled for 9 Dec 2025
Patch Tuesday, 9 December 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
15Dec
Message Center action dateDue 15 Dec 2025
MC1185442: Decoupling admin controls for agents on/off from Researcher and AnalystMicrosoft 365 Message Center Archive by Merill Fernando
30Dec
CISA KEV deadlineDue 30 Dec 2025
Microsoft Windows Use After Free Vulnerability
CVE-2025-62221
Same day: Message Center action date: MC1126353: Retirement of Search-MailboxAuditLog and New-MailboxAuditLogSearch Cmdlets by End of 2025
31Dec
Message Center action dateDue 31 Dec 2025
MC1166868: Microsoft Teams: Retirement of UKG and Blue Yonder managed connectors for ShiftsMicrosoft 365 Message Center Archive by Merill Fernando
4Jan
Message Center action dateDue 4 Jan 2026
MC1163756: Outlook for Android will require Android 10.0 or higher starting January 2026Microsoft 365 Message Center Archive by Merill Fernando
7Dec
Message Center action dateDue 7 Dec 2025
MC1182535: Retirement of Visio Data Visualizer Add-in for Microsoft ExcelMicrosoft 365 Message Center Archive by Merill Fernando
3Dec
CISA KEV deadlineDue 3 Dec 2025
Microsoft Windows Race Condition Vulnerability
CVE-2025-62215
2Dec
Message Center action dateDue 2 Dec 2025
MC1183282: Reminder: Update firewall configurations to include new network endpointsMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1183289: Reminder: Update firewall configurations to include new Intune network endpoints

Changed3

5Dec
Security5 Dec 2025
Cloudflare · 2 security records
Cloudflare WAF changelog
Related evidence (1)
- WAF - WAF Release - 2025-12-03 - Emergency
  Public source · Shared CVE CVE-2025-55182
2Dec
Revised2 Dec 2025
MC929025: Microsoft Loop – Multi-Geo Support for Shared Loop workspacesMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft 365 apps
6Dec
Notable6 Dec 2025
MC1192661: Workspaces in Edge: Upcoming migration to improved architectureMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft 365 suite

How this list is chosen

Changes from 1 Dec 2025 – 7 Dec 2025 UTC and dates due up to 6 Jan 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.