CVE-2020-6541: 
Node.js vulnerability analysis and mitigation

Use after free vulnerability (CVE-2020-6541) was discovered in WebUSB component of Google Chrome versions prior to 84.0.4147.105. This security flaw allowed remote attackers to potentially exploit heap corruption through a specially crafted HTML page (Chrome Release, NVD).

The vulnerability is classified as a Use-After-Free (CWE-416) and Out-of-bounds Write (CWE-787) issue in the WebUSB component. It received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating high severity with potential for remote exploitation (NVD).

If successfully exploited, this vulnerability could lead to heap corruption, potentially allowing an attacker to execute arbitrary code with the privileges of the Chrome browser process. The vulnerability requires user interaction, as it can be triggered through a crafted HTML page (NVD).

The vulnerability requires user interaction to visit a maliciously crafted HTML page. It was discovered and reported by Sergei Glazunov of Google Project Zero (Chrome Release).

The vulnerability was patched in Google Chrome version 84.0.4147.105. Users and administrators should update to this version or later to mitigate the risk. The fix has also been incorporated into various Linux distributions including Debian, Fedora, and Gentoo through their respective security updates (Debian Advisory, Fedora Update, Gentoo Advisory).