Weekly briefing

Week 50 · 8 Dec – 14 Dec 2025 UTC · assess the changes, then plan the next dates.

What to assess first

8 Dec – 14 Dec · dates to 13 Jan Check coverage

Act on2

12Dec
Exploited12 Dec 2025
Google Chromium Out of Bounds Memory Access Vulnerability
CVE-2025-14174
Related evidence (1)
- Edge 143.0.3650.80: fixes CVE-2025-14174, exploited in the wild
  Public source · Shared CVE CVE-2025-14174
11Dec
Exploited11 Dec 2025
Edge 143.0.3650.80: fixes CVE-2025-14174, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Google Chromium Out of Bounds Memory Access Vulnerability
  Public source · Shared CVE CVE-2025-14174
- Edge 143.0.3650.66: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes
- Edge 142.0.3595.90: fixes CVE-2025-13223, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 142.0.3595.80: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 142.0.3595.65: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 142.0.3595.53: Chromium security fixes and 1 Edge-specific fix
  Public source · Same source page; the statements may concern different changes

Coming up8

15Dec
Message Center action dateDue 15 Dec 2025
MC1185442: Decoupling admin controls for agents on/off from Researcher and AnalystMicrosoft 365 Message Center Archive by Merill Fernando
30Dec
CISA KEV deadlineDue 30 Dec 2025
Microsoft Windows Use After Free Vulnerability
CVE-2025-62221
Same day: Message Center action date: MC1126353: Retirement of Search-MailboxAuditLog and New-MailboxAuditLogSearch Cmdlets by End of 2025
31Dec
Message Center action dateDue 31 Dec 2025
MC1166868: Microsoft Teams: Retirement of UKG and Blue Yonder managed connectors for ShiftsMicrosoft 365 Message Center Archive by Merill Fernando
4Jan
Message Center action dateDue 4 Jan 2026
MC1163756: Outlook for Android will require Android 10.0 or higher starting January 2026Microsoft 365 Message Center Archive by Merill Fernando
7Jan
Message Center action dateDue 7 Jan 2026
MC1193408: (Update)Action Required: Trust DigiCert Global Root G2 Certificate Authority for using Entra services by January 7, 2026Microsoft 365 Message Center Archive by Merill Fernando
11Jan
Message Center action dateDue 11 Jan 2026
MC1187397: Microsoft Defender for Endpoint: Threat actor attribution information will be removed from alert pageMicrosoft 365 Message Center Archive by Merill Fernando
12Jan
Message Center action dateDue 12 Jan 2026
MC1164375: Retirement of "When Sending a Message" Group Policy in Classic Outlook for WindowsMicrosoft 365 Message Center Archive by Merill Fernando
13Jan
Patch TuesdayScheduled for 13 Jan 2026
Patch Tuesday, 13 January 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed2

11Dec
Security11 Dec 2025
WAF - WAF Release - 2025-12-11 - Emergency
Cloudflare WAF changelog
9Dec
Security9 Dec 2025
December 2025 Security Updates
Microsoft Security Update Guide

How this list is chosen

Changes from 8 Dec 2025 – 14 Dec 2025 UTC and dates due up to 13 Jan 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.