CVE-2020-6473: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6473 is a security vulnerability discovered in Google Chrome's Blink engine prior to version 83.0.4103.61. The vulnerability was disclosed on May 21, 2020, and affects the policy enforcement mechanism in Blink. This vulnerability was reported by Soroush Karami and Panagiotis Ilia (Chrome Release).

The vulnerability is classified as a Medium severity issue with a CVSS v3.1 Base Score of 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). It stems from insufficient policy enforcement in the Blink engine, which could allow a remote attacker to obtain potentially sensitive information from process memory through a specially crafted HTML page (NVD).

The vulnerability allows remote attackers to obtain potentially sensitive information from process memory, which could lead to information disclosure. The attack requires user interaction and can be triggered via a crafted HTML page (Debian Security).

The vulnerability requires user interaction to be exploited, as indicated by the CVSS metrics. An attacker would need to convince a user to visit a specially crafted HTML page to exploit this vulnerability. The attack vector is network-based, with low attack complexity (NVD).

The vulnerability was fixed in Google Chrome version 83.0.4103.61. Users and administrators are advised to upgrade to this version or later. Multiple Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and Gentoo (Gentoo Security, Debian Security).