chrome_mitigations.md
January 4, 2022 ยท View on GitHub
We list mitigations added in all Chrome versions.
| Version (and date) | Mitigation | References |
|---|---|---|
| Chrome ? Linux/Android 2016 | CFI | 1 |
| Chrome ? Windows 2020 | CFG | 2 3 8 |
| Chrome ? Windows | Sandbox forced image address load randomization | 3 |
| Chrome ? Windows | Sandbox win32k.sys lockdown | 3 |
| Chrome ? Windows | Sandbox non-system font restriction | 3 |
| Chrome ? Windows | Sandbox site isolation | 3 7 |
| Chrome ? Windows | Sandbox bottom-up ASLR | 3 |
| Chrome ? Windows | Sandbox high entropy ASLR | 3 |
| Chrome ? Windows | Sandbox strict handle checks | 3 |
| Chrome ? Windows | Sandbox low box token | 3 |
| Chrome 90 Windows | Hardware-enforced Stack Protection using Control-flow Enforcement Technology (CET) | 3 4 5 |
| Chrome ? | site isolation | ? |
| Chrome ? | Automatic stock variable initialization | ? |
| Chrome ? | V8 Heap Sandbox aka Ubercage | 6 |