One content update, 8.5M crashes
Did you know one config update crashed 8.5 million Windows PCs?
· 22-sec read
On July 19, 2024, CrowdStrike pushed a content update for its Falcon sensor, Channel File 291. The new template expected 21 input fields but the sensor supplied only 20, causing an out-of-bounds memory read that crashed Windows machines. Microsoft estimated 8.5 million devices were affected, less than 1% of all Windows machines, enough to disrupt airlines, hospitals and banks.
Why it matters
Config is code: canary even 'content' updates, and bounds-check inputs at every boundary.
Sources
High confidenceChecked October 20, 2026.
- Helping our customers through the CrowdStrike outage (Microsoft) blogs.microsoft.com
- External Technical Root Cause Analysis: Channel File 291 (CrowdStrike) crowdstrike.com