CVE-2016-10586

CVE-2016-10586 affects macaca-chromedriver, a Node.js wrapper, due to its insecure download of binary resources over HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, potentially leading to remote code execution (RCE) if an attacker intercepts and replaces the requested binary. With a CVSS score of 8.1 (HIGH), the attack complexity is high, but successful exploitation could result in significant impact across confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.