Summary
- An updated October 2026 Scan Cab is available for environments using the offline WSUS/Scan Cab process to assess updates for Visual Studio or Excel 2016.
- The update adds new metadata for out-of-band security updates affecting Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, Visual Studio 2017, and Excel 2016.
- IT admins who downloaded the earlier Scan Cab version should replace it with the updated cab if they use it for compliance scanning in affected environments.
- No action is needed if your organization does not use Scan Cab for these products.
Primary Service: Windows
Admin Impact: Medium
User Impact: Low
Release Start: 30 Oct 2026
Release End: 30 Oct 2026
Services: Excel, Windows
Category: Prevent or fix issues
Tags: Admin Action
History
10/30/2026 Item Added to Message Center
Microsoft Message
IMPORTANT: This notice is only relevant for environments where:
- Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, or Visual Studio 2017 is installed.
- Excel 2016 is installed.
- Scan Cab is used to check for update compliance
- The October 2026 Scan Cab was deployed before 7:00 PM PDT on October 29, 2026.
An updated version of the October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026. It includes new metadata for these out-of-band security updates:
- Visual Studio 2026 18.11, Visual Studio 2022 17.14, Visual Studio 2019 16.11, and Visual Studio 2017 15.9
- Excel 2016 (KB5002934)
These updates address security vulnerabilities across Visual Studio, and Excel 2016. See the Additional information section for vulnerability details.
Rollout schedule
The updated October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026.
Who is affected
IT administrators who downloaded the Scan Cab before 7:00 PM PDT on October 29, 2026, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments with the affected Visual Studio or Excel versions listed above.
No action is required if Scan Cab isn’t used to assess updates for these products. Because non-Microsoft applications may also use Scan Cab, review the documentation for your organization’s software and update-deployment tools to determine whether this applies to your environment.
What will happen
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
Additional information:
- Updated Scan Cab: Download the new Scan Cab
- CVE-2026-92392: HTTP/2 upload Use-After-Free
- CVE-2026-111497: Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
- Visual Studio Security Updates: Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, and Visual Studio 2017
- Excel 2016 Security Update (KB5002934): Download Center
- Announcing a smaller WSUS Scan Cab – Microsoft Tech Community: Learn more about WSUS and the Scan Cab process
- Using WUA to Scan for Updates Offline – Win32 apps: Windows Update Agent (WUA) can be used to scan computers for security updates without connecting to Windows Update
- WSUS and the Catalog Site: The Catalog Site used by WSUS to import updates and drivers