Comodo vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2016-20090 Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path runnHigh 8.5 · Jun 19, 2026
• CVE-2016-20088 Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges.High 8.5 · Jun 19, 2026
• CVE-2025-7097 A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162.High 8.2 · Jul 6, 2025
• CVE-2025-7096 A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162.High 8.2 · Jul 6, 2025
• CVE-2024-7252 Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability.High 7.8 · Jul 29, 2024
• CVE-2024-7251 Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability.High 7.8 · Jul 29, 2024
• CVE-2024-7250 Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability.High 7.8 · Jul 29, 2024
• CVE-2024-7249 Comodo Firewall Link Following Local Privilege Escalation Vulnerability.High 7.8 · Jul 29, 2024
• CVE-2024-7248 Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability.High 7.8 · Jul 29, 2024
• CVE-2022-34008 Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation.High 7.8 · Jun 21, 2022
• CVE-2019-18215 An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0.High 7.8 · Nov 18, 2019
• CVE-2019-14270 Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container fHigh 7.1 · Jul 25, 2019
• CVE-2019-3969 Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients.High 7.8 · Jul 17, 2019
• CVE-2018-17431 Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.Critical 9.8 · Jan 30, 2019
• CVE-2014-7872 Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server.High 7.2 · Jun 9, 2015
• CVE-2014-9633 The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereHigh 7.5 · Feb 3, 2015
• CVE-2011-5123 The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revokeHigh 10 · Aug 25, 2012
• CVE-2011-5121 The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which hasHigh 10 · Aug 25, 2012
• CVE-2010-5185 The Antivirus component in Comodo Internet Security before 5.3.174622.1216 does not check whether X.509 certificates in signed executable files have been revokeHigh 10 · Aug 25, 2012
• CVE-2008-1736 Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local userHigh 7.2 · Apr 29, 2008
• CVE-2008-0470 A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.High 9.3 · Jan 29, 2008
• CVE-2007-2729 Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of proceHigh 7.2 · May 16, 2007
• CVE-2007-0708 cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtCoHigh 7.2 · Feb 3, 2007
• CVE-2007-0709 cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1)High 7.2 · Feb 3, 2007