After upgrading to DLP 16.0 / 16.0 RU1 /16.0 RU2 agent some machines experience Chrome or Edge browser crashes when copying to clipboard

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

After upgrading to 16.0 / 16.0 RU1 / 16.0 RU2 agent the browser sometimes crashes when copying text to the clipboard. This issue persists with the agent configuration clipboard monitoring channel disabled. 

This is a known issue as described in the 16.0 RU1 Known issues for item CRE-13816

Environment

• DLP Endpoint Agent 16.0, 16.0 RU1, 16.0 RU2, 16.1
• Windows 10, Windows 11
• Google Chrome, Microsoft Edge

Cause

This is a side effect of a known issue and only happens in environments where Hardware-enforced Stack Protection are enabled for Chrome and Edge.

Resolution

Resolution: Fixed in release DLP 16.1 MP2 and DLP 25.1 MP1 and higher. See Download Broadcom products and software for steps to download this release.

Workaround (if upgrade is not immediately possible)

Disable the Stack protection using one of the following methods:

Method 1: Powershell Script

On the affected endpoints, run the following commands in Windows PowerShell to disable Hardware-enforced Stack Protection for Chrome and Edge respectively.

For Google Chrome:

Set-ProcessMitigation -Name chrome.exe -Disable UserShadowStack

For Microsoft Edge:

Set-ProcessMitigation -Name msedge.exe -Disable UserShadowStack

 

Method 2: Manual Change Using Windows UI

1. 1. On the affected computer, open Windows Security.
   2. You can search from the taskbar or double-click the shield icon in the system tray.
   3. Select App & browser control.
      • 
   4. In the Exploit protection section, click Exploit protection settings.
      • 
        1. 1. 1. 1.  
   5. Select the Program settings tab.
      • 
        1. 1. 1. 1.  
   6. Select "Add programme to customise" > "Add by programme name"
      • 
        1. 1. 1. 1.  
   7. Add the program with the names "chrome.exe" and "msedge.exe"
      • 
        1. 1. 1. 1.  
   8. Edit the program settings.
   9. To disable hardware-enforced stack protection, in the Hardware-enforced Stack Protection section, select Override system settings.
      • 
        1. 1. 1. 1.  
   10. Apply the changes.