Chrome 131 Security Update: Fixes for CVE-2024-11110 to 11117

From this webpage screenshot, the following key information about vulnerabilities can be obtained: 1. Vulnerability IDs and Types: - [373263969]: High CVE-2024-11110: Inappropriate implementation in Blink. - [360520331]: Medium CVE-2024-11111: Inappropriate implementation in Autofill. - [354824998]: Medium CVE-2024-11112: Use after free in Media. - [360274917]: Medium CVE-2024-11113: Use after free in Accessibility. - [370856871]: Medium CVE-2024-11114: Inappropriate implementation in Views. 一 [371929521]: Medium CVE-2024-11115: Insufficient policy enforcement in Navigation. - [40942531]: Medium CVE-2024-11116: Inappropriate implementation in Paint. - [40062534]: Low CVE-2024-11117: Inappropriate implementation in FileSystem. 2. Reporters: - Vsevolod Kokorin (Slonser) of Solidlab - Narendra Bhati, Suma Soft Pvt. Ltd - Pune (India) - Nan Wang (@eternalsakura13) and Zhenghang Xiao (@Kipreyyy) of 360 Vulnerability Research Institute - Weipeng Jiang (@Krace) of VRI - Micky - mastersplinter - Thomas Orlita - Ameen Basha M K 3. Fix Status: - Fix status is marked as “TBD” (To Be Determined) or “Reported”. 4. Reward Amounts: - Some vulnerabilities have reward amounts, such as [$1000]. 5. Fix Scope: - Fix scope includes Blink, Autofill, Media, Accessibility, Views, Navigation, Paint, FileSystem, etc. 6. Acknowledgments: - Thanks to all security researchers involved in the development cycle for preventing security vulnerabilities from entering the stable channel. 7. Internal Security Work: - Internal security work is responsible for various internal audits, fuzzing, and other projects. 8. Vulnerability Detection Tools: - Tools used for detecting vulnerabilities include AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL. 9. Reporting Vulnerabilities: - If you discover new issues, please report them by “filing a bug”. - The community help forum is also a good place to get help or learn about common questions. This information helps understand the security vulnerabilities in Chrome 131, including vulnerability types, reporters, fix status, reward amounts, fix scope, internal security efforts, and vulnerability detection tools.

Goal Reached Thanks to every supporter — we hit 100%!

Chrome 131 Security Update: Fixes for CVE-2024-11110 to 11117