Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CISA KEV deadline
CVE-2026-20963
Assessment context
CISA deadline passed 220 days ago
Weekly briefing
Week 12 · 16 Mar – 22 Mar 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
18 source records · 12 groupsSecurityiOS and iPadOS / macOS3 source records
Apple · exploited, added to CISA KEV · 3 entries
- Apple Multiple Products Buffer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2025-31277
Assessment context
CISA lists it as exploited
- Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2025-43520
Assessment context
CISA lists it as exploited
- Apple Multiple Products Improper Locking Vulnerability
Apple · exploited, added to CISA KEV
CVE-2025-43510
Assessment context
CISA lists it as exploited
Message CenterDefender
SecurityDefender5 source records
Security news · 5 entries
- Defending the AI Era: New Microsoft Capabilities to Protect AI
Security news · Microsoft Defender for Cloud Blog
- New innovations in Microsoft Defender to strengthen multi-cloud, containers, and AI model security
Security news · Microsoft Defender for Cloud Blog
- RSA 2026: What’s new in Microsoft Defender?
Security news · Microsoft Defender XDR Blog
Show the other 2 entries
- Redefining identity security for the modern enterprise
Security news · Microsoft Defender XDR Blog
- Security Copilot in Defender: empowering the SOC with assistive and autonomous AI
Security news · Microsoft Defender XDR Blog
SecurityMicrosoft Edge
Edge 146.0.3856.72: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityOracle Database / Oracle E-Business Suite / Oracle Java / Oracle WebLogic Server
Oracle Security Alert for CVE-2026-21992 - 19 March 2026
Security news · Oracle Security Alerts
SecurityCisco
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2026-20131
Assessment context
CISA lists it as exploited, including by ransomware
SecuritySharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Added to CISA KEV
CVE-2026-20963
Assessment context
CISA lists it as exploited
SecurityUbiquiti UniFi
Security Advisory Bulletin 062
Security news · Ubiquiti security advisory bulletins
Message CenterDefender
MC1254554: Upcoming retirement of select threat detections in Microsoft Defender for Cloud Apps
Message Center · Plan for change · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change
SecurityMicrosoft Edge
Edge 146.0.3856.62: fixes CVE-2026-3909, exploited in the wild
Security advisory · Microsoft Edge security release notes
Assessment context
The vendor reports an exploit in the wild
Message CenterDefender
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.