Chrome · Passwords
CVE-2026-113182
Memory Corruption in Passwords
Overview
Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.hchrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
Patch
From 566c6c8b8c6821cddeaa38b3c9722c6def551166 Mon Sep 17 00:00:00 2001
From: Rafal Godlewski <rgod@google.com>
Date: Tue, 22 Sep 2026 01:37:11 -0700
Subject: [PATCH] Disable key events during input protection in auto signin view
Similarly to https://crrev.com/c/7911384.
Fixed: 562994234
Change-Id: Ia90c3d0995cc3395cb19f87d0456b4d6056c9edd
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8432645
Reviewed-by: Adem Derinel <derinel@google.com>
Commit-Queue: Rafał Godlewski <rgod@google.com>
Cr-Commit-Position: refs/heads/main@{#1702431}
---
diff --git a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
index d6394691..be71bd8 100644
--- a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
+++ b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
@@ -69,6 +69,11 @@
controller_ = nullptr;
}
+bool AutoSigninFirstRunDialogView::ShouldAllowKeyEventsDuringInputProtection()
+ const {
+ return false;
+}
+
std::u16string AutoSigninFirstRunDialogView::GetWindowTitle() const {
return controller_->GetAutoSigninPromoTitle();
}
diff --git a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
index c2473b6d..96e66f5 100644
--- a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
+++ b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h
@@ -37,6 +37,9 @@
void ShowAutoSigninPrompt() override;
void ControllerGone() override;
+ // views::DialogDelegate:
+ bool ShouldAllowKeyEventsDuringInputProtection() const override;
+
private:
// views::DialogDelegate:
std::u16string GetWindowTitle() const override;
Loading diff…
Original Bug Report
The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
References
On This Page