September 2025 CU for SharePoint Server Subscription Edition included an security enhancement for the encryption algorithm used by the secure store service to save credentials. As a side effect credentials stored with the old algorithm could no longer be decrypted. When trying to edit an existing target application or when trying to add/update credentials the […]
A race condition in SharePoint Server can lead to application pool worker process crashes with a combination of the following Exception codes 0xC06D007E and 0xE0434352: Faulting application name: w3wp.exe, version: 10.0.20348.1, time stamp: 0xcfdb13d8 Faulting module name: KERNELBASE.dll, version: 10.0.20348.4294, time stamp: 0x689cd397 Exception code: 0xc06d007e Fault offset: 0x0000000000041b39 Faulting process id: 0x32fc Faulting application […]
After September 2025 CU for SharePoint Server Subscription Edition application pool worker process might crash with Exception code 0xC0000409. Event log will contain entries similar to this: Faulting application name: w3wp.exe, version: 10.0.17763.1, time stamp: 0xcfdb13d8 Faulting module name: owssvr.dll, version: 16.0.19127.20100, time stamp: 0x689cd397 Exception code: 0xc0000409 Fault offset: 0x000000000033b39b Faulting process id: 0x32fc […]
To enhance security a new Exploit Protection Setting was added to Windows when installing September 2025 CU. This adds several protections to OWSTIMER.EXE including an option that prevents creating child processes. SharePoint 2010 workflows require the workflow definition to be compiled using the CSC.EXE compiler – and this fails due to this Exploit Protection setting. […]
In the last couple of weeks we have received several reports of for SharePoint Server Subscription Edition application pool worker process crashes with a combination of the following Exception codes 0xC06D007E and 0xE0434352 being reported in the event log similar to these: Faulting application name: w3wp.exe, version: 10.0.20348.1, time stamp: 0xcfdb13d8 Faulting module name: KERNELBASE.dll, […]
Since release of September 2025 CU for SharePoint Server Subscription Edition we received several reports of application pool worker process crashes with Exception code 0xC0000409 being reported in the event log similar to this: Faulting application name: w3wp.exe, version: 10.0.17763.1, time stamp: 0xcfdb13d8 Faulting module name: owssvr.dll, version: 16.0.19127.20100, time stamp: 0x689cd397 Exception code: 0xc0000409 […]
After installation of September 2025 CU for SharePoint Server 2016, 2019 and Subscription Edition customers might notice a Health Analyzer entry similar to this: Reference: Trending Issue: SharePoint Health rule complains about elevated permissions for WSS_WPG group Solution: October 2025 CU for SharePoint Server 2016, 2019 and Subscription Edition includes a fix for this issue: […]
To enhance security September 2025 CU for SharePoint restricts the Windows WSS_WPG windows security group and the IIS_IUSRS windows security group from writing into the SharePoint _LAYOUTS directory (c:\program files\common files\microsoft shared\Web Server Extensions\16\TEMPLATE\LAYOUTS). As the SharePoint Configuration wizard adds the local system account of Windows (NT Authority\system) to the WSS_WPG windows security group, future […]
SharePoint Server 2025 CU for SharePoint Server 2016, 2019 and Subscription Edition includes security hardening for SharePoint Server 2013 workflows which enforces the most recent SharePoint Workflow Manager updates to be installed on SPWFM. As a side effect this also prevents classic workflow manager workflows from running as this version does not comply with this […]
After installing SharePoint Workflow Manager August 2025 CU on a machine which does not have a recent patch level of SharePoint Server Subscription Edition installed error messages similar to the following can be found in the logs: Could not load file or assembly ‘System.Memory, Version=4.0.1.1, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51’ or one of its dependencies. Reference: Trending Issue: […]
Since multiple Trending Issues have now been documented for the September 2025 CU, and it’s becoming increasingly difficult for individuals to keep track, I’ve decided to create a single summary page. Issue Status SharePoint 2013 Workflows fail in combination with Classic Microsoft Workflow Manager after September 2025 CU Warning: Upgrade to SPWFM required before July […]
To enhance security the encryption algorithm used by the secure store service to save credentials has been update to a more secure version. As a side effect credentials stored with the old algorithm can no longer be decrypted. Symptoms When trying to edit an existing target application or when trying to add/update credentials the following […]
