CVE-2020-6564: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6564 is a security vulnerability discovered in Google Chrome versions prior to 85.0.4183.83. The vulnerability stems from an inappropriate implementation in permissions that allowed a remote attacker to spoof the contents of a permission dialog through a crafted HTML page (NVD, Chrome Blog).

The vulnerability has been classified with a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. The CVSS v2.0 Base Score is 4.3 (Medium) with the vector (AV:N/AC:M/Au:N/C:N/I:P/A:N). The vulnerability is related to incorrect security UI implementation in the permissions system of Chrome (NVD).

When exploited, this vulnerability allows a remote attacker to spoof the contents of permission dialogs through specially crafted HTML pages. This could potentially lead to users being deceived about the permissions they are granting to websites (NVD).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. The attack complexity is considered low, requiring no special privileges for exploitation (NVD).

The vulnerability was patched in Google Chrome version 85.0.4183.83. Users and administrators are advised to upgrade to this version or later to mitigate the risk. The fix has been distributed to various Linux distributions including Debian, Fedora, and OpenSUSE (Chrome Blog, Debian Advisory).