Enable Structured Exception Handling Overwrite Protection (SEHOP)ID: oval:org.secpod.oval:def:87976 | Date: (C)2023-03-10 (M)2023-12-12 |
Class: COMPLIANCE | Family: windows |
Windows includes support for Structured Exception Handling Overwrite Protection (SEHOP). We recommend enabling this feature to improve the security profile of the computer. The recommended state for this setting is: Enabled.
Note: After you enable SEHOP, existing versions of Cygwin, Skype, and Armadillo-protected applications may not work correctly.
Fix:
(1) GPO: Computer Configuration\Policies\Administrative Templates\MS Security Guide\Enable Structured Exception Handling Overwrite Protection (SEHOP)
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel:DisableExceptionChainValidation
Platform: |
Microsoft Windows 11 |