Detections
Analytics

2.77 (L1) Ensure 'Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context' is set to 'Disabled'

Information

This policy setting specifies whether SharedArrayBuffers can be used in a non-cross-origin-isolated context. A SharedArrayBuffer is a binary data buffer that can be used to create views on shared memory. SharedArrayBuffers have a memory access vulnerability in several popular CPUs.

The recommended state for this setting is: Disabled.

Disabling this policy prevents attackers from being able to exploit memory access vulnerabilities found in popular CPUs.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context

Impact:

Users may experience slightly slower loading of webpages.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: 9a9c304880257cb73282388bcdfe8a731ea2da3df4ae35793e55a8f1aa48ed87