CVE-2020-9633: 
Google Chrome vulnerability analysis and mitigation

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier were found to contain a use-after-free vulnerability. This critical vulnerability was disclosed in June 2020 and affected multiple platforms including Windows, macOS, Linux, and Chrome OS (NVD, Adobe Advisory).

The vulnerability is classified as a use-after-free (CWE-416) issue. It received a Critical severity rating with a CVSS v3.1 Base Score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS v2.0 score of 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C), indicating the highest level of severity (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user, potentially allowing attackers to take complete control of the affected system (Rapid7, Gentoo).

The vulnerability is remotely exploitable with low attack complexity and requires no privileges or user interaction, as indicated by its CVSS metrics. This makes it particularly dangerous and attractive to potential attackers (NVD).

Adobe released security updates to address this vulnerability. Users were advised to upgrade to versions newer than 32.0.0.371 for Desktop Runtime and Chrome versions, and newer than 32.0.0.330 for Microsoft Edge and Internet Explorer versions. No workarounds were available, making the update the only solution (Gentoo).