Google Chrome to block admin-level browser launches for better security

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
7,524
Google is rolling out a change to Chromium that "de-elevates" Google Chrome so it does not run as an administrator to increase security in Windows.

Microsoft previously introduced a similar feature in 2019 to the Edge Browser. When users launched Edge with elevated permissions, a warning would appear, recommending that they relaunch the browser without administrative rights.

Later, Microsoft modified the feature to automatically prevent the Edge browser from launching with elevated permissions.

Microsoft is now bringing the same improvements to Chromium, with developers submitting a commit to the Chromium source code.

As spotted by Leo on X, Microsoft has confirmed that Chrome will now automatically de-elevate when users try to launch it with elevated permissions.

"Automatically de-elevate users launching chrome elevated. This CL is based on changes we've had in Edge, circa 2019, which attempts to automatically de-elevate the browser when it's run with the elevated part of a split / linked token," Stefan Smolen, who works with the Microsoft Edge team, wrote in a Chromium commit.
 

cartaphilus

Level 13
Verified
Top Poster
Well-known
Mar 17, 2023
571
I am the one to be the first against any limitations on my own system since darn it I want to run it the way I want it; BUT honestly why would one run a browser in an admin session? Browser is nothing more than a runtime compiler that encounters code that's written by anyone and everyone. Having it run as admin is as safe as having an unmedicated epileptic EOD bomb technician.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top