IMPORTANT: This notice applies only to environments where:
- .NET 8.0, 9.0, 10.0, or 11.0 RC3 is installed.
- Visual Studio 2019, 2022, or 2026 is installed.
- PowerShell 7.4 or 7.6 is installed.
- Scan Cab is used to assess update compliance.
- The October 2026 Scan Cab was deployed before 7:00 PM PDT on October 25, 2026.
What and why:
An updated version of the October 2026 Scan Cab was made available at 7:00 PM PDT on October 25, 2026. It includes new metadata for these out-of-band security updates:
These updates address security vulnerabilities across .NET, Visual Studio, and PowerShell. See the Additional information section for vulnerability details.
Rollout schedule:
The updated October 2026 Scan Cab was made available at 7:00 PM PDT on October 25, 2026.
Who is affected:
IT administrators who downloaded the Scan Cab before 7:00 PM PDT on October 25, 2026, should reacquire and redeploy it if they use Scan Cab to assess updates for environments with the affected .NET, Visual Studio, or PowerShell versions listed above.
No action is required if Scan Cab isn’t used to assess updates for these products. Because non-Microsoft applications may also use Scan Cab, review the documentation for your organization’s software and update-deployment tools to determine whether this applies to your environment.
What will happen:
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
Additional information: