Hi @Colin,
Thanks very much for looking into this and for your comprehensive analysis of the crash dump. Here are the requested details.
Windows version
Windows 11 Enterprise, Version 25H2 (OS Build 26200.9448).
Updates installed since 8 September
The significant updates are listed below. I have grouped the repeated Defender security-intelligence and Windows App Runtime entries.
8 September: 2026-09 Security Update, KB5124008, OS Build 26200.9445
8 September: 2026-09 .NET Framework Security Update, KB5126052
8 September: Windows Malicious Software Removal Tool x64 v5.145, KB890830
8 September: 2026-09 .NET 8.0.31 Security Update for x64 Client, KB5126104
8–17 September: Multiple Microsoft Defender security-intelligence updates, KB2267602
10, 13, 14, 16 and 19 September: Multiple Microsoft Windows App Runtime updates
13 September: Intel Bluetooth driver update, version 24.50.0.4
13 September: Lenovo SoftwareComponent driver update, version 26.9.0.20
13 September: Lenovo System driver update, version 26.7.0.7
14 September: 2026-09 Security Update (Hotpatch capable), KB5129241, OS Build 26200.9448
17 September: Microsoft Defender Antivirus antimalware platform update, KB4052623, version 4.18.26080.4
Administrator protection
There is no “Administrator protection” section under Windows Security > Account protection. The page only shows Windows Hello and Dynamic lock.
Visual Studio Code
Visual Studio Code starts normally from the Start menu without any additional flags.
Its version information is:
VS Code: 1.137.0, user setup
Electron: 42.10.0
Chromium: 148.0.7778.280
Node.js: 24.18.1
OS: Windows_NT x64 10.0.26200
Antivirus and endpoint protection
Windows Defender Antivirus is installed. Its current versions are:
Product version: 4.18.26080.4
Engine version: 1.1.26080.3
Security-intelligence version: 1.459.258.0
Security intelligence last updated: 18 September 2026 at 2:26 am
The computer also has the Microsoft Defender for Endpoint plug-in for WSL version 1.26.813.1, installed on 21 August 2026.
The Defender antimalware platform updated on 17 September at 9:52 pm. However, my first recorded Cursor failure occurred earlier that day, at approximately 6:02 pm. Therefore, that platform update occurred after the problem had already started. The Windows hotpatch KB5129241 was installed on 14 September.
Cursor installations and clean-install test
Good question regarding the two Cursor installations!
I was originally using the per-user installation:
C:\Users\prynhart\AppData\Local\Programs\cursor\Cursor.exe
When that stopped working, I tried uninstalling and reinstalling Cursor, but the problem remained. I then performed a fresh system-wide installation of version 3.20.21 under:
C:\Program Files\cursor\Cursor.exe
Both Cursor Start-menu shortcuts point to the system-wide executable, so the Start menu launches the fresh 3.20.21 installation.
As part of the clean-install testing, I removed everything under both of the following locations:
C:\Users\prynhart\AppData\Local\Programs\cursor
C:\Users\prynhart\AppData\Roaming\Cursor
I used Sysinternals Process Monitor (Procmon) to identify the local files being accessed by the Cursor executables before removing them.
Both installations exhibited the same behaviour when tested: Cursor does not open normally but works when launched with --no-sandbox. The fresh system-wide 3.20.21 installation also fails when launched normally from the Start menu.