Chrome · Passwords
CVE-2026-113182
Memory Corruption in Passwords
Overview
Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.hchrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc
Patch
From 566c6c8b8c6821cddeaa38b3c9722c6def551166 Mon Sep 17 00:00:00 2001 From: Rafal Godlewski <[email protected]> Date: Tue, 22 Sep 2026 01:37:11 -0700 Subject: [PATCH] Disable key events during input protection in auto signin view Similarly to https://crrev.com/c/7911384. Fixed: 562994234 Change-Id: Ia90c3d0995cc3395cb19f87d0456b4d6056c9edd Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8432645 Reviewed-by: Adem Derinel <[email protected]> Commit-Queue: Rafał Godlewski <[email protected]> Cr-Commit-Position: refs/heads/main@{#1702431} --- diff --git a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc index d6394691..be71bd8 100644 --- a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc +++ b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.cc @@ -69,6 +69,11 @@ controller_ = nullptr; } +bool AutoSigninFirstRunDialogView::ShouldAllowKeyEventsDuringInputProtection() + const { + return false; +} + std::u16string AutoSigninFirstRunDialogView::GetWindowTitle() const { return controller_->GetAutoSigninPromoTitle(); } diff --git a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h index c2473b6d..96e66f5 100644 --- a/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h +++ b/chrome/browser/ui/views/passwords/auto_signin_first_run_dialog_view.h @@ -37,6 +37,9 @@ void ShowAutoSigninPrompt() override; void ControllerGone() override; + // views::DialogDelegate: + bool ShouldAllowKeyEventsDuringInputProtection() const override; + private: // views::DialogDelegate: std::u16string GetWindowTitle() const override;
Loading diff…
Original Bug Report
The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
References
On This Page