Windows Security Health Crash after Windows 11 22H2 Upgrade

hexaae · Thursday at 6:18 AM

So it's a problem with recent Security App updates, and we can only wait for a fix from MS 🙄
It's totally random here: I use to check some ZIP and RAR files from time to time (RMB over the file, "Scan with Microsoft Defender"), and usually works fine, than randomly (even the same archive I checked before) it will crash with blank window popping up, and "Last check: Unavailable"

hexaae · Thursday at 9:09 AM

Trying from PowerShell (Admin):

Code:

Get-AppxPackage Microsoft.SecHealthUI -AllUsers | Reset-AppxPackage

I doubt will change anything but worth trying...

wrogg · Thursday at 9:16 AM

same here, This was a clean Windows install as I had a new SSD. 4 days old. no other security or AV just Defender and Windows firewall?
why do they push these out?

hexaae · Thursday at 9:19 AM

Why they don't hotifx quickly is the real question... but Microsoft is known to be very lazy with (even critical) updates unfortunately.

Yosh79 · Thursday at 2:21 PM

After 5 Months of waiting for a Fix ... the Issue is still present... Moment 2 Update from Yesterday has a new Sec Feature (i forgot the Name) and Task Icon from Sec Center say that i must check something. Start Sec Center and "bämm" instant Crash of the .exe. But, if Defender Updates and works i ignore it but that this is still not fixed is absolutely disgusting.

hexaae · Thursday at 2:38 PM

Yeah... it is simply inconceivable how Microsoft can let certain obvious bugs of a certain magnitude slide for so long.
You need MUCH patience with Windows.

GhostGlitch · Friday at 11:53 AM

Sadly, I don't have a backup. I just reinstalled Windows. MS needs to fix this... I'm not sure if TPM, Memory Integrity, or LSA are working or not. If it's just a display issue, I can ignore it, but when I check I get unstable info...
Video

Scott · Friday at 3:52 PM

I recently had a issue with the latest update where Windows Security claimed I had no TPM installed.

Windows Security reports no TPM available

But it most certainly is. Did the latest update break Windows Security?

www.elevenforum.com

I restored back to the previous bulid via Marium Reflect and all was good with Windows Security. I then re-updated to the latest build and everything was okay, even with that directory in the SecurityHealth folder.

I chalk it up to a wonky download on my first update.

hexaae · Saturday at 3:09 PM

Scott said:
I recently had a issue with the latest update where Windows Security claimed I had no TPM installed.

Windows Security reports no TPM available

But it most certainly is. Did the latest update break Windows Security?

www.elevenforum.com

I restored back to the previous bulid via Marium Reflect and all was good with Windows Security. I then re-updated to the latest build and everything was okay, even with that directory in the SecurityHealth folder.

I chalk it up to a wonky download on my first update.

TPM may be ok, but try to manually check ZIP/RAR or other files from right mouse button in File Explorer.... will crash randomly.

Scott · Saturday at 3:35 PM

I RMB scanned multiple ZIP/RAR files without any issues.

hexaae · Saturday at 3:48 PM

Yep, it's random. Do it multiple times a day and sooner or later should happen.
Since it has been reported even on brand new installations of Win11 on new laptops it can't be a "corrupt config".
Security Intelligence: 1.385.394.0

EDIT: I'm confident Microsoft will silently fix this one day on next automatic updates... maybe they already fixed it in 1.385.394.0, who knows... :wink:

@ALL
Please report the Security Intelligence version number too in your messages.

Scott · Sunday at 1:18 AM

I just got 1.385.438.0 today.

BrianInEngland · Sunday at 2:48 AM

Scott said:
I just got 1.385.438.0 today.

View attachment 55723

The Security application version is for Dev builds (25000+) - it was sent to other users. That's why it crashes. I blocked the update from installing and mine looks like this:

hexaae · Sunday at 5:37 AM

Security Intelligence: 1.385.456.0 today, it still crashes randomly manually checking ZIP or other archives.
Always the same kind of crash:

Code:

Descrizione
Percorso dell'applicazione che ha generato l'errore:    C:\Windows\System32\SecurityHealthService.exe

Firma del problema
Nome evento problema:    APPCRASH
Nome applicazione:    SecurityHealthService.exe
Versione applicazione:    10.0.22621.900
Timestamp applicazione:    45a7fb3f
Nome modulo con errori:    StackHash_0a06
Versione modulo con errori:    10.0.22621.1344
Timestamp modulo con errori:    8381da15
Codice eccezione:    c0000374
Offset eccezione:    PCH_FB_FROM_ntdll+0x000000000009F7A4
Versione SO:    10.0.22621.2.0.0.256.48
ID impostazioni locali:    1040
Informazioni aggiuntive 1:    0a06
Ulteriori informazioni 2:    0a06191dd9722cd60555a988864d8f1c
Ulteriori informazioni 3:    7ac1
Ulteriori informazioni 4:    7ac1bf3599d0c52f709810e3675715b7

hexaae · Sunday at 10:35 AM

To be exact, there are 2 kind of crashes with error exception: c0000374 and c0000409

Code:

Descrizione
Percorso dell'applicazione che ha generato l'errore:    C:\Windows\System32\SecurityHealthService.exe

Firma del problema
Nome evento problema:    BEX64
Nome applicazione:    SecurityHealthService.exe
Versione applicazione:    10.0.22621.900
Timestamp applicazione:    45a7fb3f
Nome modulo con errori:    ucrtbase.dll
Versione modulo con errori:    10.0.22621.608
Timestamp modulo con errori:    f5fc15a3
Offset eccezione:    000000000007f61e
Codice eccezione:    c0000409
Dati eccezione:    0000000000000007
Versione SO:    10.0.22621.2.0.0.256.48
ID impostazioni locali:    1040
Informazioni aggiuntive 1:    53c8
Ulteriori informazioni 2:    53c877626c0d76f9594979816f6b4101
Ulteriori informazioni 3:    af68
Ulteriori informazioni 4:    af68a59771e76998c0a4371ca40501ba

File che aiutano a descrivere il problema
WERInternalMetadata.xml

In general the crash happens only (?) on manual scan as far as I can see. If you just leave it in background as default and never check manually files (as the majority of users do) you may not notice the bug for weeks or even months... I suppose that's why MS has still not fixed it because of sporadic reports.

TheVisitor · Sunday at 1:33 PM

Windows Security just opened for me to a blank window.
This in the Event Manager:
Faulting application name: SecurityHealthService.exe, version: 10.0.22621.900, time stamp: 0x45a7fb3f
Faulting module name: ucrtbase.dll, version: 10.0.22621.608, time stamp: 0xf5fc15a3
Exception code: 0xc0000409
Fault offset: 0x000000000007f61e
Faulting process id: 0x0x1A00
Faulting application start time: 0x0x1D9582C82AA36DD
Faulting application path: C:\Windows\system32\SecurityHealthService.exe
Faulting module path: C:\Windows\SYSTEM32\ucrtbase.dll
Report Id: 46c4ee94-aff9-401d-a022-bafc2cd0a30b
Faulting package full name:
Faulting package-relative application ID:

And this:
Fault bucket , type 0
Event Name: BEX64
Response: Not available
Cab Id: 0

Problem signature:
P1: SecurityHealthService.exe
P2: 10.0.22621.900
P3: 45a7fb3f
P4: ucrtbase.dll
P5: 10.0.22621.608
P6: f5fc15a3
P7: 000000000007f61e
P8: c0000409
P9: 0000000000000007
P10:

Latest Intelligence update this morning 9:36AM Eastern DST :
KB2267602 (Version 1.385.466.0)

I have not tried rebooting yet. I did do the BRink hack several days ago and has been running smooth till today.

Scott · Sunday at 3:06 PM

Looks like I had this issue back on the 15th, when I noticed Windows Security reporting no TPM available.
Currently on 1.385.480.0 as of this morning.

BrianInEngland · Sunday at 3:46 PM

Try disabling the TPM and see if Security works properly (ie doesn't crash)

TheVisitor · Monday at 1:13 PM

I had another crash this morning with the same BEX error. I had not touched the Security center or opened options. I was just looking
through Event Viewer and noted it had crashed again.

Will re-boot and see if that helps.

TheVisitor · Monday at 1:21 PM

Did a Cold boot, total shutdown. Looking at logs in Event Viewer I see that the Secuity Center 'crashed' on shutdown along with Win 11 system stopped responding.

Something it messed with the Security Center I think.

Should I turn off LSA ? but leave the Brink Hack in place >?

Windows Security Health Crash after Windows 11 22H2 Upgrade

Member

My Computer

Member

My Computer

Member

My Computer

Member

My Computer

Member

My Computer

Member

My Computer

Member

My Computer

Well-known member

My Computers

Member

My Computer

Well-known member

My Computers

Member

My Computer

Well-known member

My Computers

Well-known member

Attachments

My Computer

Member

My Computer

Member

My Computer

Active member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Active member

My Computer

Active member

My Computer

Similar threads