Spike in Intune IME Agent (Microsoft.Management.Services.IntuneWindowsAgent.exe) Crashes Linked to Versions 1.93 / 1.94

August 14, 2025 • ID: CUA-2025-003
Severity: Medium  •  Impacted Organizations: 278+ •  Vendor: Microsoft  •  App: Intune
Description:
Our anomaly-detection pipeline surfaced a dramatic increase in crashes originating from the Intune Management Extension process Microsoft.Management.Services.IntuneWindowsAgent.exe. The spike aligns with the rollout of newer IME agent versions.

What is the Impact:
Across, daily crash volume jumped from 1,500–2,000/day to 15,000+/day beginning August 1. Since IME is responsible for app updates, PowerShell scripts, and proactive remediations, these failures may disrupt task execution on managed endpoints.

Advised Resolution:

Based on observed correlations, organizations should review client versions and consider temporarily rolling back to a previous version or applying Microsoft’s latest patch guidance as it becomes available. Monitoring IME reliability post-update is strongly recommended.


Additional info:

We will continue to track this pattern globally and update with new findings. If you’ve seen IME instability with specific versions, sharing your experience helps expand the dataset.