Detections
Analytics

1.127 (L1) Ensure 'Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context' is set to 'Disabled'

Information

This policy setting specifies whether SharedArrayBuffers can be used in a non-cross-origin-isolated context. A SharedArrayBuffer is a binary data buffer that can be used to create views on shared memory. SharedArrayBuffers have a memory access vulnerability in several popular CPUs.

The recommended state for this setting is: Disabled.

Disabling this policy prevents attackers from being able to exploit memory access vulnerabilities found in popular CPUs.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Edge\Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context

Impact:

Users may experience slightly slower loading of webpages.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Windows

Control ID: 1a4e7425135eb0ef97a95d2fda7c447d05ca02d0e07535444a5ac7776350a1a9