Low severity1.8NVD Advisory· Published Apr 22, 2019· Updated Jun 17, 2026

CVE-2016-1586

Description

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.

Affected products

Oxide Project/Oxide
cpe:2.3:a:oxide_project:oxide:*:*:*:*:*:*:*:*
Range: <1.18.3
Oxide/Oxidellm-fuzzy
Range: <1.18.3
Ubuntu/Oxidecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

git.launchpad.net/oxide/commit/nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.117
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000