CVE-2020-15987: 
Google Chrome vulnerability analysis and mitigation

A use-after-free vulnerability (CVE-2020-15987) was discovered in the WebRTC component of Google Chrome versions prior to 86.0.4240.75. This security flaw was reported by Philipp Hancke on September 14, 2020 (Chrome Release).

The vulnerability is classified as a medium severity issue with a CVSS v3.1 base score of 8.8 HIGH (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The flaw exists in the WebRTC (Web Real-Time Communication) component of Chrome, which allows for real-time communication capabilities in web browsers (NVD).

If exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted WebRTC stream, potentially leading to arbitrary code execution within the context of the browser (NVD).

The vulnerability requires user interaction and can be exploited remotely through a crafted WebRTC stream. The attack complexity is considered low, requiring no special privileges for exploitation (NVD).

The vulnerability was patched in Google Chrome version 86.0.4240.75. Users and administrators are advised to upgrade to this version or later. The fix has been backported to various Linux distributions including Debian, Fedora, and openSUSE (Debian Advisory, Fedora Update, OpenSUSE Update).