CVE-2020-15996: 
Google Chrome vulnerability analysis and mitigation

A high-risk vulnerability identified as CVE-2020-15996 was discovered in Google Chrome's password functionality. The vulnerability affects versions prior to 86.0.4240.99 and involves a use-after-free condition in the password handling mechanism. The flaw was reported by Rong Jian and Guang Gong of Alpha Lab, Qihoo 360 on September 30, 2020 (Chrome Release).

The vulnerability is classified as a use-after-free (CWE-416) security flaw in the password handling component of Google Chrome. It received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating high severity with potential for complete compromise of system confidentiality, integrity, and availability (NVD).

When exploited, this vulnerability could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape through a specially crafted HTML page. This could lead to complete system compromise, affecting the confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires user interaction and can be exploited through a crafted HTML page after compromising the renderer process. The attack complexity is considered low, requiring no privileges for exploitation (NVD).

Google addressed this vulnerability in Chrome version 86.0.4240.99. Users are advised to update to this version or later to mitigate the risk (Chrome Release).

The vulnerability was given the informal name "Brisk Squirt" by CERT/CC's automated naming system @vulnonym, as part of an initiative to create neutral, non-fear-inducing vulnerability names (SecurityWeek).