This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Windows 10 Build 2004
Outlook crashes intermittently and generates the following Application Event Log error.
Event 1000, Application Error (11:06AM, 12/7/2020) Faulting application name: OUTLOOK.EXE, version: 16.0.13426.20308, time stamp: 0x5fc6ea9b Faulting module name: ucrtbase.dll, version: 10.0.19041.546, time stamp: 0x73123758 Exception code: 0xc0000409 Fault offset: 0x0009edbb Faulting process id: 0x41c0 Faulting application start time: 0x01d6ccaedccaa9fa Faulting application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Faulting module path: C:\WINDOWS\System32\ucrtbase.dll Report Id: f8791f7b-faf7-452a-8ff2-7268662a6db2 Faulting package full name: Faulting package-relative application ID:
I have run SFC /SCANNOW
I have completely uninstalled and reinstalled Microsoft Office 365
Here are the properties of the failing file:
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
No they did not help. I will remove them as well.
Hi! Have you had any other luck? We're using Sophos as well and while so far everyone isn't affected, we do have a handful of users who are affected and it's driving them nuts. The users who ae affected are on the latest January updates for O365. Has anyone tried rolling back to the December release?
Today I ran several times my testscript starting 250 times a new e-mail message with various Sophos components individually turned OFF.
When Exploit mitigation turned-OFF, I was able to run my test script 3 times in a row (= 750 emails) without a single crash of Outlook.
After each test-run I restarted Outlook manually.
When I turned the component back ON, Outlook crashed after about 20 emails.
Again, tuned the component back OFF, my testscript ran succesfully again
So, Sophos Exploit Mitigation seems te be the **** in this case.
Is someone else able to proof this?
It looks like there is a Sophos Exploit mitigation hotfix available, which I will try.
https://support.sophos.com/support/s/article/KB-000038477?language=en\_US
| WINEP-30574 | Resolved and issue where CodeCave protection was causing applications to crash |
|---|
T.Kennis:
I tried the hotfix and it did not work for me. I am currently testing Office without Sophos to see if I get the error. Did Sophos give you any additional info?
Today I ran several times my testscript starting 250 times a new e-mail message with various Sophos components individually turned OFF.
When Exploit mitigation turned-OFF, I was able to run my test script 3 times in a row (= 750 emails) without a single crash of Outlook.
After each test-run I restarted Outlook manually.
When I turned the component back ON, Outlook crashed after about 20 emails.
Again, tuned the component back OFF, my testscript ran succesfully again
So, Sophos Exploit Mitigation seems te be the **** in this case.
Is someone else able to proof this?
It looks like there is a Sophos Exploit mitigation hotfix available, which I will try.
https://support.sophos.com/support/s/article/KB-000038477?language=en\_US
WINEP-30574 Resolved and issue where CodeCave protection was causing applications to crash
Ai, that's a pity. I will try the hotfix myself too.
Sophos did not provide me any information, besides at first to find out which Sophos component causes the issue (if Sophos is the cause) and they provided me the link to the hotfix I mentioned.
Unfortunately, for me the Sophos hotfix did not prevent Outlook from crashing either.
However, disabling the Exploit mitigation component did.
I will provide Sophos my feedback.
