CVE-2020-6475: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6475 is a security vulnerability discovered in Google Chrome versions prior to 83.0.4103.61, identified on May 21, 2020. The vulnerability involves incorrect implementation in full screen functionality that allowed a remote attacker to spoof security UI via a crafted HTML page (NVD, Chrome Release).

The vulnerability is classified with a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. This indicates that the vulnerability is network exploitable, requires low attack complexity, needs no privileges, requires user interaction, and can result in high impact to integrity (NVD).

The vulnerability could allow an attacker to spoof the security user interface in Chrome's full screen mode, potentially misleading users about the security status or origin of web content. This could lead to phishing attacks or other forms of user deception (Debian Advisory).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. The exploit was discovered by Khalil Zhani and reported on October 31, 2019 (Chrome Release).

The vulnerability was fixed in Google Chrome version 83.0.4103.61. Users and administrators should upgrade to this version or later to mitigate the risk. Multiple Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and Gentoo (Gentoo Advisory, Debian Advisory).