CVE-2016-10609

CVE-2016-10609 affects chromedriver version 1.26 on Linux, stemming from its insecure practice of downloading binary resources over unencrypted HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, enabling an attacker on the network to potentially swap legitimate binaries with malicious ones. With a CVSS score of 8.1 (HIGH), successful exploitation could lead to remote code execution (RCE), resulting in high impact to confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.