chromium is vulnerable to authorization bypass. The vulnerability exists through insufficient policy enforcement in intent handling that allows a remote attacker to bypass navigation restrictions via a crafted HTML page.
lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html
chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_25.html
crbug.com/1092451
lists.fedoraproject.org/archives/list/[email protected]/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
security-tracker.debian.org/tracker/CVE-2020-6568
www.debian.org/security/2021/dsa-4824