Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,911 questions
Unable to install Nov 23 patch KB5032189 - curlx.exe has been quarantined by Defender
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 94%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
jammerNTFS
0
Reputation points
We have a lot of machine that is currently pending to be install with Nov23 patch KB5032189 .
we identified based on the CBS logs that curl.exe has been corrupted. Based on Threat and Virus Protection, Defender has quarantined the mentioned file. (Either from winsxs, system32)
**this is due to curl.exe from old version (Accepted version 8.4) is blocked due to vulnerabilities. So now everytime we repaired the mentioned file using dism command and working source files, it will again corrupted due to Defender has blocked it. We unable to install the Nov 23 patch due to this. Temporary workaround: install other Antivirus, repair the curl files and able to install patch. but this is manual work. sfc scannow and dism has been run multiple times.
Any suggestion? Other than release the curl.exe from Defender since they informed this is high vulnerabilities.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 28.000000000000004%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECK%3C/text%3E%3C/svg%3E)
Catherine Kyalo 655 Reputation points Microsoft Employee2024-02-20T11:18:44.4933333+00:00 Hi @jammerNTFS The issue seems to stem from Windows Defender quarantining the old version of curl.exe due to detected vulnerabilities. Are you unable to deploy the newer / accepted version of curl then install patch KB5032189?
Sign in to comment