ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord
MC1531060 Prevent or fix issuesAdmin impact

An updated version of the October 2026 Scan Cab is available

From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.
Windows
Message Center archive Open in your tenant

Microsoft category: Prevent or fix issues. Read the notice and linked documentation for any recommendations or required actions; whether your tenant is affected is not known here.

What the notice says

Microsoft’s text, safely structured

IMPORTANT: This notice is only relevant for environments where:

  • Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, or Visual Studio 2017 is installed.
  • Excel 2016 is installed.
  • Scan Cab is used to check for update compliance
  • The October 2026 Scan Cab was deployed before 7:00 PM PDT on October 29, 2026.

What and why

An updated version of the October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026. It includes new metadata for these out-of-band security updates:

  • Visual Studio 2026 18.11, Visual Studio 2022 17.14, Visual Studio 2019 16.11, and Visual Studio 2017 15.9
  • Excel 2016 (KB5002934)

These updates address security vulnerabilities across Visual Studio, and Excel 2016. See the Additional information section for vulnerability details.

Rollout schedule

The updated October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026.

Who is affected

IT administrators who downloaded the Scan Cab before 7:00 PM PDT on October 29, 2026, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments with the affected Visual Studio or Excel versions listed above.

No action is required if Scan Cab isn’t used to assess updates for these products. Because non-Microsoft applications may also use Scan Cab, review the documentation for your organization’s software and update-deployment tools to determine whether this applies to your environment.

What will happen

Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.

Additional information

  • Updated Scan Cab: Download the new Scan Cab
  • CVE-2026-92392: HTTP/2 upload Use-After-Free
  • CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
  • Visual Studio Security Updates: Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, and Visual Studio 2017
  • Excel 2016 Security Update (KB5002934): Download Center
  • Announcing a smaller WSUS Scan Cab - Microsoft Tech Community: Learn more about WSUS and the Scan Cab process
  • Using WUA to Scan for Updates Offline - Win32 apps: Windows Update Agent (WUA) can be used to scan computers for security updates without connecting to Windows Update
  • WSUS and the Catalog Site: The Catalog Site used by WSUS to import updates and drivers

What changed

Between archive captures, newest first

The archive supplies one version of this notice.

Learn more

Links from the notice and their documentation checks

Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability (5 items)

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
  • 4 linked pages have not been read yet.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 10:02 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.