CVE-2020-6417: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6417 is a security vulnerability discovered in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from an inappropriate implementation in the Chrome installer that allowed a local attacker to execute arbitrary code via a crafted registry entry (Chrome Release, NVD). The vulnerability was reported by Renato "Wrath" Moraes and Altieres "FallenHawk" Rohr on December 13, 2019, and was fixed in the Chrome stable channel update released on February 4, 2020.

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction, while potentially impacting confidentiality, integrity, and availability at a high level (NVD).

If exploited, this vulnerability could allow a local attacker to execute arbitrary code through a crafted registry entry, potentially leading to complete system compromise within the context of the affected Chrome installation (Red Hat).

The vulnerability was fixed in Chrome version 80.0.3987.87. Users and administrators are advised to update to this version or later to mitigate the risk. The update was distributed through the Chrome stable channel and various Linux distribution repositories (Chrome Release).