Low chrome Memory Corruption 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
ImpactMemory corruption in Passwords
DescriptionMemory corruption in Passwords
ComponentPasswords
Bug ClassMemory Corruption
Tracker562994234
Fix commit566c6c8b8c68 (chromium/src) +8/-0
CISA KEVNot listed
CreditedGoogle
Disclosed2026-10-20

Files Changed

  • chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
  • chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
From 566c6c8b8c6821cddeaa38b3c9722c6def551166 Mon Sep 17 00:00:00 2001
From: Rafal Godlewski <rgod@google.com>
Date: Tue, 22 Sep 2026 01:37:11 -0700
Subject: [PATCH] Disable key events during input protection in auto signin view

Similarly to https://crrev.com/c/7911384.

Fixed: 562994234
Change-Id: Ia90c3d0995cc3395cb19f87d0456b4d6056c9edd
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8432645
Reviewed-by: Adem Derinel <derinel@google.com>
Commit-Queue: Rafał Godlewski <rgod@google.com>
Cr-Commit-Position: refs/heads/main@{#1702431}
---
diff --git a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
index d6394691..be71bd8 100644
--- a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
+++ b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
@@ -69,6 +69,11 @@
   controller_ = nullptr;
 }
 
+bool AutoSigninFirstRunDialogView::ShouldAllowKeyEventsDuringInputProtection()
+    const {
+  return false;
+}
+
 std::u16string AutoSigninFirstRunDialogView::GetWindowTitle() const {
   return controller_->GetAutoSigninPromoTitle();
 }
diff --git a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
index c2473b6d..96e66f5 100644
--- a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
+++ b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
@@ -37,6 +37,9 @@
   void ShowAutoSigninPrompt() override;
   void ControllerGone() override;
 
+  // views::DialogDelegate:
+  bool ShouldAllowKeyEventsDuringInputProtection() const override;
+
  private:
   // views::DialogDelegate:
   std::u16string GetWindowTitle() const override;
Loading diff…

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.