CVE-2020-6522: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6522 is a security vulnerability discovered in Google Chrome prior to version 84.0.4147.89, identified on July 22, 2020. The vulnerability stems from an inappropriate implementation in external protocol handlers that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page (NVD, Chrome Release).

The vulnerability has been assigned a CVSS v3.1 base score of 9.6 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. The issue specifically relates to the implementation of external protocol handlers in Chrome, which could be exploited through a specially crafted HTML page to escape the browser's sandbox protection mechanisms (NVD).

If successfully exploited, this vulnerability could allow an attacker to escape the Chrome sandbox, potentially leading to execution of arbitrary code with elevated privileges. The critical CVSS score indicates that successful exploitation could result in a complete compromise of the affected system's confidentiality, integrity, and availability (NVD).

The vulnerability requires user interaction (clicking on a malicious link or visiting a malicious website) but can be exploited remotely. It was reported by Eric Lawrence of Microsoft on February 13, 2020 (Chrome Release).

The vulnerability was patched in Google Chrome version 84.0.4147.89. Users and administrators are strongly advised to upgrade to this version or later. Various Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and Gentoo (Debian Advisory, Gentoo Advisory).