MC1531060 Low
An updated version of the October 2026 Scan Cab is available
Summary AI-generated
An updated October 2026 Scan Cab is available with new metadata for Visual Studio and Excel 2016 security updates to address vulnerabilities.
Suggested actions AI-generated
- Re-download updated Scan Cab
- Re-deploy updated Scan Cab if used with affected products
- Review software deployment documentation
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1525374 An updated version of the October 2026 Scan Cab is available
- MC1223281 An updated version of the January 2026 Scan Cab is available
- MC1486397 An updated version of the September 2026 Scan Cab is available
- MC1507520 (Updated) The October 2026 Scan Cab is available
- MC1287681 An updated version of the April 2026 Scan Cab is available
- MC1469525 (Updated) The September 2026 Scan Cab is available
Original post from Microsoft
IMPORTANT: This notice is only relevant for environments where:
- Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, or Visual Studio 2017 is installed.
- Excel 2016 is installed.
- Scan Cab is used to check for update compliance
- The October 2026 Scan Cab was deployed before 7:00 PM PDT on October 29, 2026.
What and why:
An updated version of the October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026. It includes new metadata for these out-of-band security updates:
- Visual Studio 2026 18.11, Visual Studio 2022 17.14, Visual Studio 2019 16.11, and Visual Studio 2017 15.9
- Excel 2016 (KB5002934)
These updates address security vulnerabilities across Visual Studio, and Excel 2016. See the Additional information section for vulnerability details.
Rollout schedule:
The updated October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026.
Who is affected:
IT administrators who downloaded the Scan Cab before 7:00 PM PDT on October 29, 2026, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments with the affected Visual Studio or Excel versions listed above.
No action is required if Scan Cab isn’t used to assess updates for these products. Because non-Microsoft applications may also use Scan Cab, review the documentation for your organization’s software and update-deployment tools to determine whether this applies to your environment.
What will happen:
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
Additional information:
- Updated Scan Cab: Download the new Scan Cab
- CVE-2026-92392: HTTP/2 upload Use-After-Free
- CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
- Visual Studio Security Updates: Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, and Visual Studio 2017
- Excel 2016 Security Update (KB5002934): Download Center
- Announcing a smaller WSUS Scan Cab - Microsoft Tech Community: Learn more about WSUS and the Scan Cab process
- Using WUA to Scan for Updates Offline - Win32 apps: Windows Update Agent (WUA) can be used to scan computers for security updates without connecting to Windows Update
- WSUS and the Catalog Site: The Catalog Site used by WSUS to import updates and drivers