CrowdStrike part 2 crashes Microsoft Office on Windows 11 24H2

Luckily, the problem hasn't crashed millions of computers worldwide

Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.

What just happened? Enterprise users at companies that employ CrowdStrike antivirus software and have received prompts to upgrade their operating systems to Windows 11 24H2 should probably wait. The security toolchain has encountered another faulty update that could make Microsoft Office apps unusable. Fortunately, the problem isn't as widespread as the incident from earlier this year.

Microsoft is investigating an error that causes Microsoft Office applications like Word and Excel to crash after users upgrade to Windows 11 24H2. The problem only impacts companies and managed IT environments, so those using Windows 11 Home or Pro on personal devices need not worry.

The issue was traced to an update for CrowdStrike's Falcon sensor software. It triggers when a host's Prevention Policy engages the "Enhanced Exploitation Visibility Prevention Policy." Other antivirus programs and older versions of Windows likely aren't affected, but Microsoft hasn't ruled out the possibility.

Update (Nov 6, 9am): A CrowdStrike spokesperson has requested us to publish the following clarification, although Microsoft does not place blame on CrowdStrike for the issue, they do associate their security software with the problem: "This is not a CrowdStrike issue. An issue in Windows 11 24H2 is causing some specific applications to hang. CrowdStrike identified and reported the issue with Windows 11 24H2 to Microsoft and are waiting for them on a resolution."

Although the company hasn't yet fully resolved the problem, it has stemmed the spread by temporarily disabling the affected security policy and delaying the deployment of Windows 11 24H2 on impacted devices that haven't installed it.

CrowdStrike users should check the company's security bulletin for more information.

// Related Stories

• Microsoft plans to move security software out of the Windows kernel
• "Windows Intelligence": Microsoft may drop Copilot in major AI rebranding

A related problem with CrowdStrike's Falcon sensor infamously caused a BSOD (blue screen of death) on over eight million PCs earlier this year, halting airliners, broadcasters, and other important infrastructure around the globe.

Microsoft's policy of granting security software access to the Windows kernel quickly took the blame. The company has since been working to reverse the practice despite regulations that require it.

CrowdStrike isn't the first company to encounter problems with Windows 11 24H2. Soon after Microsoft deployed the major update last month, some DRAM-less Western Digital SSDs encountered BSODs and other bugs. Those still affected should download the company's latest firmware.

Windows 11 24H2 is designed to embed generative AI features deeply into the operating system. As Microsoft continues to deploy the update, enhanced chatbot, image editing, and other functionality will come to PCs with NPUs.

These include devices with Qualcomm Snapdragon X Elite, Intel Core Ultra, or AMD Ryzen AI 300 processors. The company's controversial Recall feature, which allows AI to remember nearly everything that happens on a PC, has faced multiple delays but remains a keystone component of the update.