By far, the most commonly-reported “vulnerability” reported to the Chrome Vulnerability Rewards program boils down to “I can steal my own password.” Despite having its very own FAQ entry, this gets reported to the VRP at varying levels of breathlessness, sometimes multiple times per day.
You can see this “attack” in action:
Yes, it’s true, you can use Chrome to steal your own password.
You can also grab a knife and stab yourself in the leg. I wonder how often knife-makers get letters to that effect?