Getting winlo64.sys error after update

Natalia Joaquin 41 Reputation points
2025-08-18T19:22:41.9566667+00:00

Good afternoon, we have ViewSonic IFPs in our classrooms with the integrated PCs, over the summer we updated all our systems for our PCs. Now we are getting an error message when our users - teachers - login: winlo64.sys.

From the research I've done, this is due to a security setting in Defender - Core Isolation - to be more precise, the feature has to be enabled for this to go away, but when I do this, the error still shows.

Then I found another suggestion stating that it could be a network driver that needed update, when I check the device manager, no drivers are in need of updates.

All systems are running WIN11.

Microsoft Security | Microsoft Defender | Other
{count} votes

2 answers

Sort by: Most helpful
  1. Kevin Artinger 0 Reputation points
    2025-08-28T07:12:59.74+00:00

    We had the same problem with our Maxhub Teams rooms devices. The error was, that the winio64.sys driver is on a Microsoft Block list for vulnerable drivers, because there are security issues with this driver. https://nvd.nist.gov/vuln/detail/CVE-2024-55407
    The Driver is used in the Maxhub Pivot Application and the DSSAudioService.

    I had to turn off the "Microsoft Vulnerable Driver Blocklist" feature in Windows Defender on the device, after that the devices worked normal again. How to Turn On or Off Microsoft Vulnerable Driver Blocklist in Windows ...

    Unfortunately this is not a real solution, because this is not good for the device security. We will contact our service partner to provide an updated version of the mentioned Software that contains this driver. Unfortunately the software is not available for public download.

    I hope that I could help you.

    0 comments No comments

  2. Natalia Joaquin 41 Reputation points
    2025-08-28T12:26:37.4733333+00:00

    Kevin, thank you so much for your input on this. I don't feel comfortable trying this if it's going to make our devices vulnerable. I will run it by my team, either way, and see what they say. However, if you hear of a good fix for this, I would appreciate it if you can let me know so I can try it. Much obliged.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.