Chrome 128 Security Update: 37 Vulnerabilities Fixed, Including In-the-Wild Exploits

Below is a summary of key information regarding the vulnerabilities mentioned in the screenshot: Chrome 128 Security Update - This update addresses a total of 37 security vulnerabilities, including high, medium, and low severity issues. High Severity Vulnerabilities (CVE Level: High) - CVE-2024-7964: "Use-After-Free issue in Password implementation," reported anonymously on August 8, 2024, with a reward of $36,000. - CVE-2024-7965: "Vulnerability due to improper implementation in V8," reported by TheDog on July 30, 2024, with a reward of $11,000. - CVE-2024-7966: "Out-of-bounds memory access in Skia," reported by Renan Rios (@HyHy100) on July 25, 2024, with a reward of $10,000. - CVE-2024-7967: "Heap buffer overflow in Font," reported by Tashita Software Security Team on July 27, 2024, with a reward of $7,000. - CVE-2024-7968: "Use-After-Free issue in AutoFill," reported by Han Zheng (HexHive) on June 25, 2024, with a reward of $1,000. - CVE-2024-7971: "Type confusion vulnerability in V8," reported by MSRC on August 19, 2024, with reward status pending (TBD). - CVE-2024-7972: "Vulnerability due to improper implementation in V8," reported by Simon Gerst, Liam Wachter, and Julian Greminger on June 10, 2024, with a reward of $11,000. Medium Severity Vulnerabilities (CVE Level: Medium) - A total of 11 medium-severity vulnerabilities were fixed, covering areas such as PDFium, V8 API, Permissions implementation, FedCM, and Installer data validation. Low Severity Vulnerabilities (CVE Level: Low) - A total of 6 low-severity vulnerabilities were addressed, involving components such as WebApp, custom tags, and extension implementation. In-the-Wild Exploitation - CVE-2024-7965 and CVE-2024-7971 have been reported to be exploited in the wild. Internal Audits and Engineering Contributions - An additional 36 vulnerabilities were discovered through internal audits, fuzzing, and other initiatives, tracked under reference [361165957].

Goal Reached Thanks to every supporter — we hit 100%!

Chrome 128 Security Update: 37 Vulnerabilities Fixed, Including In-the-Wild Exploits