Edge 147.0.3912.72: Chromium security fixes
Security advisory · Microsoft Edge security release notes
Weekly briefing
Week 16 · 13 Apr – 19 Apr 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
12 source records · 11 groupsMessage CenterDefender
MC1281506: Planned breaking changes to ASIM KQL functions used by Microsoft Sentinel for Developers
Message Center · Plan for change · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change
SecurityCloudflare
WAF - WAF Release - 2026-04-15
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-33057, CVE-2026-20079, CVE-2026-21643
CVE-2026-33057CVE-2026-20079CVE-2026-21643CVE-2026-23869CVE-2026-23864
SecurityMicrosoft 365 Apps
Microsoft Office Remote Code Execution
Added to CISA KEV
CVE-2009-0238
Assessment context
CISA lists it as exploited
SecurityMicrosoft Security Update Guide
April 2026 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
SecuritySharePoint
Microsoft SharePoint Server Improper Input Validation Vulnerability
Added to CISA KEV
CVE-2026-32201
Assessment context
CISA lists it as exploited
SecurityCloudflare
WAF - Email obfuscation decode script is now non-render-blocking
Security advisory · Cloudflare WAF changelog
Assessment context
SecurityFortinet
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2026-21643
Assessment context
CISA lists it as exploited
SecurityExchange
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Added to CISA KEV
CVE-2023-21529
Assessment context
CISA lists it as exploited
SecurityMicrosoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Added to CISA KEV
CVE-2012-1854
Assessment context
CISA lists it as exploited
SecurityWindows2 source records
Added to CISA KEV · 2 entries
- Microsoft Windows Link Following Vulnerability
Added to CISA KEV
CVE-2025-60710
Assessment context
CISA lists it as exploited
- Microsoft Windows Out-of-Bounds Read Vulnerability
Added to CISA KEV
CVE-2023-36424
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.