Weekly briefing

Week 11 · 9 Mar – 15 Mar 2026 UTC · assess the changes, then plan the next dates.

What to assess first

9 Mar – 15 Mar · dates to 14 Apr Check coverage

Act on2

13Mar
Security13 Mar 2026
Google Chrome · 2 security records
CVE-2026-3909
13Mar
Security13 Mar 2026
Microsoft Edge · 2 security records
Microsoft Edge security release notes
Related evidence (6)
- Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
  Public source · Shared CVE CVE-2026-3910
- Edge 145.0.3800.97: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 145.0.3800.82: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 145.0.3800.70: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge Extended Stable 144.0.3719.130: fixes CVE-2026-2441, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 145.0.3800.58: fixes CVE-2026-2441, exploited in the wild
  Public source · Same source page; the statements may concern different changes

Coming up8

16Mar
RetirementDue 16 Mar 2026
Retirement: AzureML Batch Endpoints API Preview retirement
Same day: Message Center action date: MC1234542: Retirement of “Suspected identity theft (pass-the-ticket)” classic alert
20Mar
Message Center action dateDue 20 Mar 2026
MC1222977: Microsoft Defender for Android: End of support for Android 10 devicesMicrosoft 365 Message Center Archive by Merill Fernando
21Mar
CISA KEV deadlineDue 21 Mar 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2026-20963
22Mar
Message Center action dateDue 22 Mar 2026
MC1224565: Trust DigiCert Global Root G2 certificate authority to avoid Exchange Online email disruptionMicrosoft 365 Message Center Archive by Merill Fernando
29Mar
RetirementDue 29 Mar 2026
Retirement: Classic VMware protection scenario using ASR
30Mar
Message Center action dateDue 30 Mar 2026
MC1184996: Legacy SharePoint Online Content Delivery Network (CDN) domain to be retired—review configurationsMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1189663: Retirement of external access token for actionable messages – moving to Microsoft Entra authentication; Message Center action date: MC1226498: Retirement of the isBroadcast property for Teams Live Events in Microsoft Graph; Message Center action date: MC1234566: Outlook: retiring “Contact Masking” (hide suggested recipients) - March 31, 2026
31Mar
RetirementDue 31 Mar 2026
Retirement: 9 products
API Keys for querying Application Insights; Batch Region Retirement; Classic alerts for Azure Backup; Classic Compute Node Communication Model; Deprecation of flash-extract custom fields; Retire Require Approve Client App Conditional Access Grant; VHD and Managed Images; Windows Server 2019 on AKS…
Same day: End of support: Azure Kubernetes Service Kubernetes 1.32; End of support: Microsoft SQL Server 2012 Parallel Data Warehouse (Analytics Platform System); Message Center action date: MC1227080: Project Online retirement: Project Web App site creation and unused PWA site changes effective April 1, 2026; Message Center action date: MC1240748: Retiring the Impala connector
14Apr
Patch TuesdayScheduled for 14 Apr 2026
Patch Tuesday, 14 April 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed2

12Mar
Security12 Mar 2026
WAF - WAF Release - 2026-03-12 - Emergency
Cloudflare WAF changelog
10Mar
Security10 Mar 2026
March 2026 Security Updates
Microsoft Security Update Guide

How this list is chosen

Changes from 9 Mar 2026 – 15 Mar 2026 UTC and dates due up to 14 Apr 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.