Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/272 feeds/APIs · 469/469 docs · 7/9 advisories · checked 15:25 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 3 · 12 Jan – 18 Jan 2026 UTC · assess the changes, then plan the next dates.

What to assess first

12 Jan – 18 Jan · dates to 17 Feb Check coverage

Coming up8

  1. CISA KEV deadlineDue 28 Jan 2026

    Microsoft Office PowerPoint Code Injection Vulnerability

    CVE-2009-0556

  2. Message Center action dateDue 30 Jan 2026

    MC1158908: (Update)Support for Events from email in Outlook is changing—Schema.org markup required for reliable calendar extractionMicrosoft 365 Message Center Archive by Merill Fernando

    Same day: Message Center action date: MC1184649: Microsoft SharePoint: Retirement of IDCRL authentication protocol and enforcement of OpenID Connect and OAuth protocols

  3. CISA KEV deadlineDue 3 Feb 2026

    Microsoft Windows Information Disclosure Vulnerability

    CVE-2026-20805

  4. Patch TuesdayScheduled for 10 Feb 2026

    Patch Tuesday, 10 February 2026

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

  5. Message Center action dateDue 15 Feb 2026

    MC1217649: Endpoint DLP-sensitive data alerting retiring in Defender; use Purview DLPMicrosoft 365 Message Center Archive by Merill Fernando

    Same day: Message Center action date: MC1230455: Context IQ retirement in the new Outlook and Outlook on the web

  6. CISA KEV deadlineDue 16 Feb 2026

    Microsoft Office Security Feature Bypass Vulnerability

    CVE-2026-21509

Changed4

  1. Security13 Jan 2026

    January 2026 Security Updates

    Microsoft Security Update Guide

  2. Release17 Jan 2026

    Windows · 3 releases

    Windows 11, version 24H2, Windows 11, version 25H2

  3. Release17 Jan 2026

    Windows Server · 2 releases

    Windows Server 2025

How this list is chosen

Changes from 12 Jan 2026 – 18 Jan 2026 UTC and dates due up to 17 Feb 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 27 Oct 15:25 UTC · 271 of 272 readable · 269 fully read · documentation 469/469 current