Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-x9yp-a4rb-97ed
Vulnerability ID VCID-x9yp-a4rb-97ed
Aliases CVE-2016-10579
GHSA-jh5w-6964-x5cf
Summary chromedriver Downloads Resources over HTTP
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-311 Missing Encryption of Sensitive Data
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00765 https://api.first.org/data/v1/epss?cve=CVE-2016-10579
epss 0.00765 https://api.first.org/data/v1/epss?cve=CVE-2016-10579
epss 0.00765 https://api.first.org/data/v1/epss?cve=CVE-2016-10579
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-jh5w-6964-x5cf
cvssv3.1 8.1 https://github.com/giggio/node-chromedriver
generic_textual HIGH https://github.com/giggio/node-chromedriver
cvssv3.1 8.1 https://github.com/giggio/node-chromedriver/commit/71981099216b7c15ec01e50baaacb15fe1b85e56
generic_textual HIGH https://github.com/giggio/node-chromedriver/commit/71981099216b7c15ec01e50baaacb15fe1b85e56
cvssv3.1 8.1 https://github.com/giggio/node-chromedriver/issues/78#issuecomment-266314859
generic_textual HIGH https://github.com/giggio/node-chromedriver/issues/78#issuecomment-266314859
cvssv3.1 8.1 https://nvd.nist.gov/vuln/detail/CVE-2016-10579
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2016-10579
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2016-10579
https://github.com/giggio/node-chromedriver
https://github.com/giggio/node-chromedriver/commit/71981099216b7c15ec01e50baaacb15fe1b85e56
https://github.com/giggio/node-chromedriver/issues/78#issuecomment-266314859
CVE-2016-10579 https://nvd.nist.gov/vuln/detail/CVE-2016-10579
GHSA-jh5w-6964-x5cf https://github.com/advisories/GHSA-jh5w-6964-x5cf
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/giggio/node-chromedriver
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/giggio/node-chromedriver/commit/71981099216b7c15ec01e50baaacb15fe1b85e56
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/giggio/node-chromedriver/issues/78#issuecomment-266314859
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2016-10579
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.73899
EPSS Score 0.00765
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:25:05.534795+00:00 GHSA Importer Import https://github.com/advisories/GHSA-jh5w-6964-x5cf 38.6.0