MC1525374 Low
An updated version of the October 2026 Scan Cab is available
Summary AI-generated
An updated October 2026 Scan Cab was released to address security vulnerabilities in .NET, Visual Studio, and PowerShell. Admins must reacquire and redeploy if downloaded before 7:00 PM PDT on Oct 25, 2026.
Suggested actions AI-generated
- Reacquire and redeploy updated Scan Cab if downloaded before Oct 25, 2026, 7:00 PM PDT
- Review software and update-deployment tools documentation
- Apply security updates for .NET, Visual Studio, and PowerShell as appropriate
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1531060 An updated version of the October 2026 Scan Cab is available
- MC1287681 An updated version of the April 2026 Scan Cab is available
- MC1486397 An updated version of the September 2026 Scan Cab is available
- MC1223281 An updated version of the January 2026 Scan Cab is available
- MC1507520 (Updated) The October 2026 Scan Cab is available
- MC1471885 An updated version of the September 2026 Scan Cab is available
Original post from Microsoft
IMPORTANT: This notice applies only to environments where:
- .NET 8.0, 9.0, 10.0, or 11.0 RC3 is installed.
- Visual Studio 2019, 2022, or 2026 is installed.
- PowerShell 7.4 or 7.6 is installed.
- Scan Cab is used to assess update compliance.
- The October 2026 Scan Cab was deployed before 7:00 PM PDT on October 25, 2026.
What and why:
An updated version of the October 2026 Scan Cab was made available at 7:00 PM PDT on October 25, 2026. It includes new metadata for these out-of-band security updates:
- .NET 8.0 (KB5133964), .NET 9.0 (KB5133965), .NET 10.0 (KB5133966), and .NET 11.0 RC3 (Release notes)
- Visual Studio 2026, Visual Studio 2022, and Visual Studio 2019
- PowerShell 7.6 and PowerShell LTS 7.4
These updates address security vulnerabilities across .NET, Visual Studio, and PowerShell. See the Additional information section for vulnerability details.
Rollout schedule:
The updated October 2026 Scan Cab was made available at 7:00 PM PDT on October 25, 2026.
Who is affected:
IT administrators who downloaded the Scan Cab before 7:00 PM PDT on October 25, 2026, should reacquire and redeploy it if they use Scan Cab to assess updates for environments with the affected .NET, Visual Studio, or PowerShell versions listed above.
No action is required if Scan Cab isn’t used to assess updates for these products. Because non-Microsoft applications may also use Scan Cab, review the documentation for your organization’s software and update-deployment tools to determine whether this applies to your environment.
What will happen:
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
Additional information:
- Updated Scan Cab: Download the new Scan Cab
- CVE-2026-70197: .NET Remote Code Execution Vulnerability
- CVE-2026-102870: ASP.NET Core Remote Code Execution Vulnerability
- CVE-2026-114148: ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
- .NET Security Updates: .NET 8.0 (KB5133964), .NET 9.0 (KB5133965), .NET 10.0 (KB5133966), and .NET 11.0 RC3 (Release notes)
- Visual Studio Security Updates: Visual Studio 2026, Visual Studio 2022, and Visual Studio 2019
- PowerShell Security Updates: PowerShell 7.6 and PowerShell LTS 7.4
- Announcing a smaller WSUS Scan Cab - Microsoft Tech Community: Learn more about WSUS and the Scan Cab process
- Using WUA to Scan for Updates Offline - Win32 apps: Windows Update Agent (WUA) can be used to scan computers for security updates without connecting to Windows Update
- WSUS and the Catalog Site: The Catalog Site used by WSUS to import updates and drivers