This requires account access which could be obtained from a computer left open, etc. By viewing when the password was last changed you can reset the password if they have never changed it by stating when the account was made. 

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Password reset based upon account creation. Requires account access. 

VERSION
Chrome Version: 52.0.2743.116
Operating System: Windows 10