The latest KB5049981 Patch Tuesday for Windows 10 causes SgrmBroker.exe to be terminated and users are quite worried about it
However, Microsoft released a fix.
3 min. read
Updated on
Read our disclosure page to find out how can you help Windows Report sustain the editorial team. Read more

Microsoft released the first Patch Tuesday updates of 2025 for Windows 10, and Windows 11, last week, and with it, the Redmond-based tech giant addressed eight zero-day vulnerabilities from a total of 159 CVEs, a high number, which made the installation of these updates even more urgent for many users out there.
However, it seems that installing the KB5049981 for Windows 10 has caused many devices to run into the %%3489660935 Error, a bug that causes the SgrmBroker.exe (System Guard Runtime Monitor Broker) to appear as terminated in the Event Viewer.
The System Guard Runtime Monitor is a component of Windows Defender, which is the Windows native platform that protects devices from harm coming from viruses, malware, and other such cyber threats. The component was introduced to Windows 10 a while ago, and it keeps the operating system safe.
Naturally, since the System Guard Runtime Monitor keeps Windows 10 devices safe, a lot of users have started to report the issue on official Windows forums. It’s worth noting that the problem is widespread at this point.
Hello all. I am on Win10 Home Version 22H2 OS Build 19045.5371 on a HP Omen Desktop and a HP Envy Laptop. I noticed today upon checking my Event Viewer after installing patch Tuesday updates Cumulative Update for Windows 10 Version 22H2 for x64-based Systems KB5049981 and KB5050188 and also KB890830 I started seeing the below Event 7023 Service Control Manager….SgrmBroker.exe (System Guard Runtime Monitor Broker] Terminated with Error %%3489660935 after restarting my computer. I have run SFC and DISM and did not find any integrity violations. I am not seeing any other computer problems except this error. Tried to change the System Guard Runtime Monitor Broker Service but access is denied and remains on Delayed Start. I do not use Windows Defender but I use Norton 360 Select Plus on both computers. Is anyone else seeing this and is there a solution for this error. I have tried everything including the registry “HKEY_Local_MACHINE\SYSTEM\CurrentControlSet\Services” Start setting change from 3 to 4 but that causes a lot of Security SPP errors so I changed the value back and did a system restore that I had made before hand. It would appear the Update problem is with KB5049981. Microsoft this needs to be fixed as I feel the integrity of the Windows platform is at risk with this service not starting like it is suppose to do.
If you share the same concern, though, Microsoft moderators said it’s not such a big issue, and users shouldn’t really be concerned. After all, the Sgrmbroker.exe can be terminated manually, as the service sometimes creates conflicts or slows down the computer.
Microsoft itself acknowledged the issue and even provided a workaround for it, although it agrees that Windows 10 users shouldn’t worry.
However, suppose you’re worried your Windows 10 device might be at risk. In that case, you should know that the Redmond-based tech giant has addressed the bug and installed the Security Intelligence Update KB2267602 (Version 1.421.1449.0), released on January 19, 2025, fixes it. The update can only be downloaded and installed manually through the Microsoft Update Catalog.
Have you experienced the SgrmBroker.exe being terminated issue on your Windows 10 device after updating the OS with KB5049981? Let us know if installing the KB2267602 update solved this tricky issue for you.
User forum
0 messages