IMPORTANT: This notice is only relevant for environments where:
- Visual Studio 2026, Visual Studio 2022, Visual Studio 2019, or Visual Studio 2017 is installed.
- Excel 2016 is installed.
- Scan Cab is used to check for update compliance
- The October 2026 Scan Cab was deployed before 7:00 PM PDT on October 29, 2026.
What and why:
An updated version of the October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026. It includes new metadata for these out-of-band security updates:
These updates address security vulnerabilities across Visual Studio, and Excel 2016. See the Additional information section for vulnerability details.
Rollout schedule:
The updated October 2026 Scan Cab was made available at 7:00 PM PDT on October 29, 2026.
Who is affected:
IT administrators who downloaded the Scan Cab before 7:00 PM PDT on October 29, 2026, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments with the affected Visual Studio or Excel versions listed above.
No action is required if Scan Cab isn’t used to assess updates for these products. Because non-Microsoft applications may also use Scan Cab, review the documentation for your organization’s software and update-deployment tools to determine whether this applies to your environment.
What will happen:
Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.
Additional information: