Blog | G5 Cyber Security

Window 10 update weakened Google Chrome’s security

A Windows 10 kernel bug made it possible to escape Google Chrome’s sandbox, a security researcher with Google Project Zero found. The vulnerability was introduced with version 1903 of the operating system on May 21, 2019. Google’s Chrome sandbox is a secure environment that downgrades browser processes to low permissions and cuts them from the rest of the system to prevent damage if hijacked by a malicious actor. The researcher created a complicated chain of execution that allowed escaping the Chrome sandbox. The security feature bypass vulnerability was patched by Microsoft as part of the April 2020 Patch Tuesday.

Source: https://www.bleepingcomputer.com/news/security/window-10-update-weakened-google-chromes-security/

Exit mobile version