Carbon Black Cloud: The application "X" attempted to modify the next instruction to execute in the process "X"

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

• Applications being terminated after modifying their own instruction sets

  The application "C:\program files (x86)\microsoft office\office16\winword.exe" attempted to modify the next instruction to execute in the process "C:\program files (x86)\microsoft office\office16\winword.exe". The operation was blocked by Carbon Black Cloud

Environment

• Carbon Black Cloud Sensor: 3.9
• Microsoft Windows: All Supported Versions

Cause

Known issue

Resolution

This is resolved in sensors 4.0+ (DSEN-26353).

Additional Information

https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/4.0.0.1292/rn/vmware-carbon-black-cloud-windows-sensor-4001292-release-notes/index.html