M365 Change Digest Public digest of Microsoft 365 Message Center

Back to all posts

MC1179337 High

An updated version of the October 2025 Scan Cab is available

  • Admin
  • Security

Summary AI-generated

Admins using Scan Cab before Oct 24, 2025, 8:54pm PT must re-acquire and redeploy it to ensure update compliance and address CVE-2025-59287 in Windows Server environments.

Suggested actions AI-generated

  • Re-acquire updated Scan Cab
  • Redeploy Scan Cab in affected environments
  • Review update deployment tools for Scan Cab usage

Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.

Similar posts

Search for more like this

Original post from Microsoft

IMPORTANT: This notice is only relevant for environments where:
  • Scan Cab is used to check for update compliance.
  • The October 2025 Scan Cab was deployed before 8:54 pm PT on October 24, 2025.
 
An updated version of the October 2025 Scan Cab was made available at 8:54 pm PT on October 24, 2025. This Scan Cab includes new metadata corresponding to new updates for the following versions of Windows Server:
 
The new Microsoft updates include an out-of-band update, released October 20, 2025, to fix an issue in the Windows Recovery Environment (WinRE), and out-of-band updates, released October 23-24, 2025, that include additional protections to address CVE-2025-59287. Windows servers that do not have the WSUS server role enabled are not affected by this vulnerability. See the additional information section of this message for details.

How this affects your organization:
IT administrators who downloaded the Scan Cab before 8:54 pm PT on October 24, 2025, should re-acquire and re-deploy their Scan Cab if it is used to assess updates for environments where Windows Server is installed and the WSUS server role is enabled.
 
No action is required on environments where Scan Cab is not employed. However, please note that there might be non-Microsoft applications which utilize Scan Cab. Review the documentation for any software and update deployment tools which might be in use for your organization to understand if this is applicable in your environment.
 
What you need to do to prepare:
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
 
Additional information: