CVE-2020-16028: 
Google Chrome vulnerability analysis and mitigation

A heap buffer overflow vulnerability (CVE-2020-16028) was discovered in the WebRTC component of Google Chrome versions prior to 87.0.4280.66. The vulnerability was reported on October 14, 2020, and was officially disclosed on November 17, 2020, through Chrome's stable channel update (Chrome Release).

The vulnerability is classified as a heap buffer overflow in the WebRTC component of Google Chrome. It received a CVSS v3.1 base score of 8.8 (HIGH), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is categorized under CWE-787 (Out-of-bounds Write) (NVD).

If exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page. The high CVSS score indicates potential severe impacts on confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires user interaction and can be exploited remotely through network access. The attack complexity is rated as low, requiring no special privileges for exploitation (NVD).

Google addressed this vulnerability in Chrome version 87.0.4280.66 for Windows and Linux, and 87.0.4280.67 for Mac. Users are advised to update to these versions or later to mitigate the risk (Chrome Release).