Spike in Intune IME Agent (Microsoft.Management.Services.IntuneWindowsAgent.exe) Crashes Linked to Versions 1.93 / 1.94
August 14, 2025 • ID: CUA-2025-003
Severity:
Medium
•
Impacted Organizations: 278+ •
Vendor: Microsoft •
App: Intune
Description:
Our anomaly-detection pipeline surfaced a dramatic increase in crashes originating from the Intune Management Extension process Microsoft.Management.Services.IntuneWindowsAgent.exe. The spike aligns with the rollout of newer IME agent versions. What is the Impact:
Across, daily crash volume jumped from 1,500–2,000/day to 15,000+/day beginning August 1. Since IME is responsible for app updates, PowerShell scripts, and proactive remediations, these failures may disrupt task execution on managed endpoints. Advised Resolution:
Based on observed correlations, organizations should review client versions and consider temporarily rolling back to a previous version or applying Microsoft’s latest patch guidance as it becomes available. Monitoring IME reliability post-update is strongly recommended.
Additional info:
We will continue to track this pattern globally and update with new findings. If you’ve seen IME instability with specific versions, sharing your experience helps expand the dataset.
Explore more findings:
November 14, 2025
Severity: Medium
Severity: Medium
October 15, 2025
Severity: High
Severity: High
October 12, 2025
Severity: High
Severity: High
