This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com
/chromium/src/+/master/docs/security/faq.md

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.

VERSION
Chrome Version: Version 62.0.3202.94 (Official Build) (64-bit)
Operating System: Mac High Sierra, Ver 10.13.2 (17C88)

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

1. Go to Manage Passwords in Chrome Settings
2. Click Show Password on any entry. Type in password to show password.
3. Click 3 dot menu icon and hit Delete on the same row that is showing the password.
4. The shown password will be persistent and overwrite the next column, the column after the deleted password.
5. See attachement.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace *with symbols*, registers,
exception record]
Client ID (if relevant): [see link above]

 

Deleted: Screen Shot 2017-12-18 at 2.55.47 PM.png 181 KB

	Screen Shot 2017-12-18 at 2.55.47 PM.png 181 KB View Download