VULNERABILITY DETAILS

A removed password from 'Saved Passwords' will be re-added without a user re-saving.


VERSION

Chrome Version: 67.0.3396.87 stable
Operating System: Mac OS 10.13.5


REPRODUCTION CASE

Load a form where a password has been saved and will auto-fill. 
In a second tab load settings and navigate to 'Manage passwords'. 
Find the saved password that is being auto-filled on previous tab and select 'Remove' from ... menu. 
Return to the first tab and refresh. 
Password will continue to be auto-filled and if you return back to passwords it will have been re-added.