This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home
/chromium-security/security-faq

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
I received access to someone's passwords through the Passwords section

VERSION
Chrome Version: 54.0.2840.87 m + stable
Operating System: Windows 10 Home

REPRODUCTION CASE
My laptop broke so I borrowed someone's laptop for a while, I downloaded Chrome, logged into my Google account etc. and used it for 2 weeks. I got my own laptop back and downloaded Chrome and logged in and when I tried to log into Facebook, it automatically filled in an e-mail and password and I got access to a total stranger's Facebook account. I checked my passwords in the password manager and noticed several usernames and passwords of this person in my list, I know for a fact that I am the only person that used this laptop while I was logged in and I wiped my SSD when I returned it.
The bottom line is that someone's usernames and passwords merged with my Google account somehow.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]