Weekly briefing

Week 14 · 30 Mar – 5 Apr 2026 UTC · assess the changes, then plan the next dates.

What to assess first

30 Mar – 5 Apr · dates to 5 May Check coverage

Act on2

1Apr
Exploited1 Apr 2026
Google Dawn Use-After-Free Vulnerability
CVE-2026-5281
Related evidence (1)
- Edge 146.0.3856.97: fixes CVE-2026-5281, exploited in the wild
  Public source · Shared CVE CVE-2026-5281
1Apr
Exploited1 Apr 2026
Edge 146.0.3856.97: fixes CVE-2026-5281, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Google Dawn Use-After-Free Vulnerability
  Public source · Shared CVE CVE-2026-5281
- Edge 146.0.3856.84: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 146.0.3856.72: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 146.0.3856.62: fixes CVE-2026-3909, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 146.0.3856.59: fixes CVE-2026-3910, exploited in the wild
  Public source · Same source page; the statements may concern different changes
- Edge 145.0.3800.97: Chromium security fixes
  Public source · Same source page; the statements may concern different changes

Coming up8

14Apr
Patch TuesdayScheduled for 14 Apr 2026
Patch Tuesday, 14 April 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
14Apr
End of supportDue 14 Apr 2026
End of support: 10 products
Dynamics C5 2016; Dynamics NAV 2016; Microsoft Advanced Group Policy Management 4.0; Microsoft Application Virtualization 5.0; Microsoft Application Virtualization 5.1; Microsoft Application Virtualization Hosting 5.0 for Windows Desktops; Microsoft Application Virtualization Hosting 5.1 for Window…
24Apr
Message Center action dateDue 24 Apr 2026
MC1281506: Planned breaking changes to ASIM KQL functions used by Microsoft Sentinel for DevelopersMicrosoft 365 Message Center Archive by Merill Fernando
27Apr
CISA KEV deadlineDue 27 Apr 2026
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
CVE-2012-1854
Same day: CISA KEV deadline: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability; CISA KEV deadline: Microsoft Windows Out-of-Bounds Read Vulnerability; CISA KEV deadline: Microsoft Windows Link Following Vulnerability
28Apr
RetirementDue 28 Apr 2026
Retirement: Azure Application Gateway v1
Same day: CISA KEV deadline: Microsoft Office Remote Code Execution; CISA KEV deadline: Microsoft SharePoint Server Improper Input Validation Vulnerability
30Apr
RetirementDue 30 Apr 2026
Retirement: Custom Commands
Same day: Message Center action date: MC1181996: Migration update for Office 365 connectors retirement in Teams – webhook URL support
5Apr
Message Center action dateDue 5 Apr 2026
MC1221939: Message Trace support on Graph API is now in Public PreviewMicrosoft 365 Message Center Archive by Merill Fernando
4Apr
End of servicingDue 4 Apr 2026
End of servicing: Dynamics 365 Business Central on-premises (Modern Policy), 2024 release wave 2, version 25.x

Changed2

30Mar
Security30 Mar 2026
WAF - WAF Release - 2026-03-30
Cloudflare WAF changelog
4Apr
Release4 Apr 2026
Az PowerShell module 15.5.0
Az PowerShell module releases
Related evidence (3)
- Az PowerShell module 15.4.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Az PowerShell module 15.3.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Az PowerShell module 15.2.0
  Public source · Suggested by a shared curated topic and product; not a verified connection

How this list is chosen

Changes from 30 Mar 2026 – 5 Apr 2026 UTC and dates due up to 5 May 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.