CVE-2020-15988: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-15988 is a security vulnerability affecting Google Chrome on Windows prior to version 86.0.4240.75. The vulnerability was discovered and reported by Zhong Zhaochen of andsecurity.cn and Samuel Attard on January 10, 2020, and was publicly disclosed in October 2020 (Chrome Release).

The vulnerability is classified as a low severity issue with a CVSS v3.1 base score of 6.3 MEDIUM (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). It stems from insufficient policy enforcement in the downloads functionality of Google Chrome on Windows systems (NVD).

When exploited, this vulnerability could allow a remote attacker who convinces a user to open files to execute arbitrary code via a crafted HTML page (NVD).

The vulnerability requires user interaction to be exploited, specifically requiring the user to be convinced to open specific files. The attack can be initiated remotely, but requires low attack complexity (NVD).

The vulnerability was patched in Google Chrome version 86.0.4240.75. Users are advised to update to this version or later to mitigate the risk. The fix was also backported to various Linux distributions including Fedora, Debian, and openSUSE (Debian Advisory, Fedora Update).