CVE-2016-1586

CVE-2016-1586 describes a vulnerability in Oxide versions prior to 1.18.3 where a malicious webview could install persistent unload handlers. These handlers could then reuse an incognito BrowserContext that was slated for destruction, potentially leading to unauthorized data access or manipulation. The vulnerability has a CVSS v3 score of 7.5 (High), indicating a network-based attack with low complexity and high impact on integrity, requiring no user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.