[5636:5636:0517/171504.762673:INFO:CONSOLE:15] "[poc] requesting geolocation permission...", source: http://127.0.0.1:19234/poc.html?poc-trigger (15) [5636:5636:0517/171506.643024:INFO:CONSOLE:15] "[poc] triggering compromised-renderer IPC via scroll...", source: http://127.0.0.1:19234/poc.html?poc-trigger (15) [5728:5728:0517/171506.643806:ERROR:components/autofill/content/renderer/password_generation_agent.cc:342] [POC-RENDERER] firing ShowPasswordEditingPopup IPC bounds=10,2 320x24 [5636:5636:0517/171506.652024:ERROR:chrome/browser/ui/views/autofill/popup/popup_base_view.cc:595] [POC-BROWSER] PopupBaseView::DoUpdateBoundsAndRedrawPopup class=PasswordGenerationPopupViewViews popup_bounds=109,178 390x109 element_bounds=10,144 320x26 content_area=0,143 1400x857 overlaps_permission_prompt=YES overlaps_any_open_prompt=YES z_order=kSecuritySurface [5636:5636:0517/171506.652060:ERROR:chrome/browser/ui/views/autofill/popup/popup_base_view.cc:604] [POC-BROWSER] *** VULNERABILITY CONFIRMED *** PasswordGenerationPopupViewViews is being shown at kSecuritySurface z-order while overlapping an open permission/dialog prompt. The base-class DoUpdateBoundsAndRedrawPopup lacks the BoundsOverlapWithOpenPermissionsPrompt/BoundsOverlapWithAnyOpenPrompt checks present in PopupViewViews — the popup will render on top of the permission bubble. [5636:5636:0517/171506.652084:ERROR:chrome/browser/ui/views/autofill/popup/popup_base_view.cc:625] [POC-BROWSER] [bandaid-fix] hiding PasswordGenerationPopupViewViews due to kOverlappingWithAnotherPrompt [5636:5636:0517/171512.642759:INFO:CONSOLE:15] "[poc] done", source: http://127.0.0.1:19234/poc.html?poc-trigger (15)