CVE-2020-6552: 
Google Chrome vulnerability analysis and mitigation

A use-after-free vulnerability was discovered in Blink, the rendering engine of Google Chrome, prior to version 84.0.4147.125. This vulnerability, tracked as CVE-2020-6552, was reported by Tim Becker of Theori on July 22, 2020 (Chrome Blog).

The vulnerability is classified as a high-severity issue with a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The flaw allows a remote attacker to potentially exploit heap corruption via a crafted HTML page (NVD).

If successfully exploited, this vulnerability could lead to heap corruption, potentially allowing an attacker to execute arbitrary code within the context of the browser. The high CVSS score indicates that successful exploitation could result in a complete compromise of confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires user interaction, specifically visiting a maliciously crafted HTML page. The attack complexity is considered low, requiring no special access privileges for exploitation (NVD).

Google addressed this vulnerability in Chrome version 84.0.4147.125. Users are advised to update to this version or later. The fix was also backported to various Linux distributions, including Debian 10 (Buster) in version 87.0.4280.88-0.4~deb10u1 and Fedora 33 (Debian Advisory, Fedora Update).