PatchTheCVEoxide vulnerabilities and fixes
Recent CVEs affecting oxide, with upgrade or downgrade steps. 2 tracked.
oxide has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-04-22. Highest priority: CVE-2015-1332 (score 57/100).
- CVE-2016-1586 LOW 1.8 UPGRADE A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is q
- CVE-2015-1332 HIGH 8.8 MITIGATE UPGRADE The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14
FAQ
How do I fix oxide vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oxide being exploited right now?
None of the tracked oxide CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oxide CVE should I patch first?
CVE-2015-1332 currently ranks highest (57/100): The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.