Windows Defender Service Crashing with 0xc0000374 on Windows 11 24H2 Lenovo X13 Laptops

Environment:

• Devices: Lenovo ThinkPad X13 laptops
• OS: Windows 11 24H2
• Management: Microsoft Intune/Entra ID managed
• Started: Approximately 1 month ago

Symptoms:

1. Intermittent system freezing - devices become unresponsive requiring hard reboot
2. Windows Defender service stops and cannot be restarted manually
3. Event Viewer errors:
   • Event ID 7031 (Service Control Manager): "The Microsoft Defender Antivirus Service service terminated unexpectedly. It has done this 7 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."
   • Application Error Event ID 1000: MsMpEng.exe crashing with exception code 0xc0000374 (heap corruption)

Pattern:

• Issue affects devices from only 1 of multiple Intune/Defender tenants we manage
• Not all X13 laptops affected - only random subset
• Other tenants with identical hardware models not experiencing issues
• Started approximately 1 month ago across multiple devices

Current Status:

• MsMpEng.exe keeps crashing repeatedly
• Real-time protection cannot stay running
• Service recovery attempts fail

Has anyone else experienced this specific error on 24H2? Any known issues with recent Defender platform/definition updates causing heap corruption?