{"id":496791,"date":"2023-06-19T14:53:28","date_gmt":"2023-06-19T12:53:28","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=496791"},"modified":"2023-06-19T16:09:05","modified_gmt":"2023-06-19T14:09:05","slug":"windows-11-update-breaks-chrome-for-some-antivirus-users","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/496791-windows-11-update-breaks-chrome-for-some-antivirus-users.html","title":{"rendered":"Windows 11 update breaks Chrome for some antivirus users"},"content":{"rendered":"<p>Microsoft&#8217;s latest Windows 11 cumulative update breaks the Google Chrome browser on systems protected by a range of software, including Cisco, WatchGuard EDR, and Malwarebytes.<\/p>\n<p>According to <strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/windows-11-kb5027231-also-breaks-chrome-for-cisco-watchguard-edr-users\/\" target=\"_blank\" rel=\"noopener\">Bleeping Computer<\/a><\/strong>, Windows admins and users have reported issues launching the browser after installing the KB5027231 update.<\/p>\n<p>While it should be possible to resolve the issue by uninstalling the update, some admins have reported that this is impossible via Windows Server Update Services (WSUS) due to a &#8220;catastrophic error&#8221;.<\/p>\n<p>&#8220;Rolled KB5027231 to a bunch of users, and I have Chrome broken everywhere,&#8221; one Windows admin <strong><a href=\"https:\/\/www.reddit.com\/r\/sysadmin\/comments\/148geic\/comment\/jo40ih8\/\" target=\"_blank\" rel=\"noopener\">said on Reddit<\/a><\/strong>.<\/p>\n<p>&#8220;Attempting to rollback via wusa[.exe \u2014 the standalone Windows update installer utility] shows a &#8216;catastrophic error&#8217; in the Event Viewer, and WSUS shows I cannot roll this back.&#8221;<\/p>\n<p>Last week, Malwarebytes <strong><a href=\"https:\/\/support.malwarebytes.com\/hc\/en-us\/articles\/17571529651475\" target=\"_blank\" rel=\"noopener\">confirmed<\/a><\/strong> that the issue affects customers using its anti-malware products. It said an anti-exploit module issue was to blame and advised that users disable Chrome as a protected app.<\/p>\n<p>&#8220;On June 13, 2023, Microsoft&#8217;s KB5027231 update installed on Windows 11 caused a conflict between Google Chrome and exploit protection, resulting in browser crashes,&#8221; it said.<\/p>\n<p>While affected users never see the Google Chrome interface after launching the app, the process runs in the background but won&#8217;t load fully due to the conflict.<\/p>\n<p>WatchGuard and Cisco Secure Endpoint users have also started reporting that Chrome won&#8217;t launch after installing the update.<\/p>\n<p>&#8220;We deploy Secure Endpoint 8.1.7 to our few thousand devices, and we started getting a mountain of reports this morning that Google Chrome would not appear on the screen after attempting to open it,&#8221; one admin <strong><a href=\"https:\/\/community.cisco.com\/t5\/endpoint-security\/secure-endpoint-breaking-chrome-after-june-windows-cumulative\/m-p\/4854641\/highlight\/true#M7605\" target=\"_blank\" rel=\"noopener\">said<\/a><\/strong>.<\/p>\n<p>&#8220;With a little trial &amp; error, I found that killing the Secure Endpoint service or uninstalling Secure Endpoint will allow Chrome to open again.&#8221;<\/p>\n<p>It appears as though Cisco Secure Endpoint has a similar issue to that of Malwarebytes, with the Exploit Protection engine blocking Google Chrome from launching.<\/p>\n<p>WatchGuard <strong><a href=\"https:\/\/techsearch.watchguard.com\/KB?type=Known%20Issues&amp;SFDCID=kA16S000000gDGsSAM&amp;lang=en_US\" target=\"_blank\" rel=\"noopener\">confirmed<\/a><\/strong> the issue on Friday, 15 June 2023.<\/p>\n<hr \/>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/security\/496775-russian-ransomware-hackers-hit-us-energy-department.html\" rel=\"bookmark\">Russian ransomware hackers hit US Energy Department<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Windows admins say uninstalling the update via Windows Server Update Services is impossible due to a &#8220;catastrophic error&#8221;.<\/p>\n","protected":false},"author":341076,"featured_media":456995,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[913,167,1137,31208,123,80377,70233],"class_list":["post-496791","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cisco","tag-google","tag-google-chrome","tag-malwarebytes","tag-microsoft","tag-watchguard","tag-windows-11"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/496791"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341076"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=496791"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/496791\/revisions"}],"predecessor-version":[{"id":496925,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/496791\/revisions\/496925"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/456995"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=496791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=496791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=496791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}