CVE-2016-1586 A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.
HighCVSS 7.5
EPSS 0.66%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oxide project oxide | < 1.18.3 | 1.18.3 |
| ubuntu Oxide | < 1.18.3 | 1.18.3 |
References
- git.launchpad.net patch third-party-advisory