Microsoft Outlook Application Crash due to UCRTBASE.DLL

Anonymous
2020-12-07T17:43:25+00:00

Windows 10 Build 2004

Outlook crashes intermittently and generates the following Application Event Log error.

Event 1000, Application Error (11:06AM, 12/7/2020) Faulting application name: OUTLOOK.EXE, version: 16.0.13426.20308, time stamp: 0x5fc6ea9b Faulting module name: ucrtbase.dll, version: 10.0.19041.546, time stamp: 0x73123758 Exception code: 0xc0000409 Fault offset: 0x0009edbb Faulting process id: 0x41c0 Faulting application start time: 0x01d6ccaedccaa9fa Faulting application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Faulting module path: C:\WINDOWS\System32\ucrtbase.dll Report Id: f8791f7b-faf7-452a-8ff2-7268662a6db2 Faulting package full name: Faulting package-relative application ID:

I have run SFC /SCANNOW

I have completely uninstalled and reinstalled Microsoft Office 365

Here are the properties of the failing file:

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

69 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2021-01-26T16:53:48+00:00

    We have applied the Outlook exclusion, and no crashes.

    We have many clients and this only affects one, they work in Insurance and run Act! and Acturis.  They are our only client running those, anyone else using either?  They both have plugins to Outlook but as the crashes happen in safemode I had discounted 3rd party addins.

    None of my clients use those applications.   I think it is just something with the Sophos Mitigation component messing with Outlook.

    As a next level test I have enabled Exploit Mitigation but turned off all the sub-components for Mitigation on Microsoft Outlook.  So far there have been no crashes. So it looks like it is one of these sub-components causing the crash.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2021-01-26T16:53:59+00:00

    We added the Microsoft Outlook exclusion for the Exploit Mitigation component as well and have not had any crashes since then. I know many others have submitted tickets to Sophos regarding this issue, but I'll be creating one just to emphasize the need for a more permanent solution.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2021-01-26T17:07:29+00:00

    Keep up the good work! Like to hear from you if you've found the sub-component which is causing Outlook to crash. I didn't go that far, but it would isolate the exception to a minimum.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2021-01-28T03:30:53+00:00

    I have a client experiencing the same issue with 4 out of 10 users.  I did notice errors in the event log stating Insights was crashing around the same time as the ucrtbase.dll error on the workstations with the issue.  I didn't add the Sophos exclusion, but removed the Insights add-on from Outlook for 2 of the users to see if it makes a difference.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2021-01-29T09:23:49+00:00

    Today I received an email from Sophos related to my case in which they advised me to install the latest hotfix which was updated January 21st.

    https://support.sophos.com/support/s/article/KB-000038477?language=en_US

    The previous version of the hotfix didn't work.

    According to their mail: "This should resolve the reported crashes."

    Because I have to delete the global exception rule in Sophos Central which will cause new crashes of Outlook within our organization, does anyone want to try the new hotfix?

    Was this answer helpful?

    0 comments