CO
Vendor
Comodo
134
CVEs
0
On KEV
0
New 30D
Products
CD6.1
Comodo Dome Firewall
Comodo
29 CVEs0 on KEV0 new
DF6.1
Dome Firewall
Comodo
29 CVEs0 on KEV0 new
CI7.8
Comodo Internet Security
Comodo
16 CVEs0 on KEV0 new
CA–
Comodo Antivirus
Comodo
10 CVEs0 on KEV0 new
CP–
Comodo Personal Firewall
Comodo
9 CVEs0 on KEV0 new
IS8.8
Internet Security
Comodo
9 CVEs0 on KEV0 new
AN7.8
Antivirus
Comodo
8 CVEs0 on KEV0 new
CF–
Comodo Firewall Pro
Comodo
6 CVEs0 on KEV0 new
IS8.8
Internet Security Premium
Comodo
4 CVEs0 on KEV0 new
IS7.8
Internet Security Pro
Comodo
4 CVEs0 on KEV0 new
DR4.7
Dragon
Comodo
3 CVEs0 on KEV0 new
FI7.8
Firewall
Comodo
2 CVEs0 on KEV0 new
BA–
Backup
Comodo
1 CVEs0 on KEV0 new
CB7.8
Chromodo Browser
Comodo
1 CVEs0 on KEV0 new
DB7.8
Dragon Browser
Comodo
1 CVEs0 on KEV0 new
GE–
Geekbuddy
Comodo
1 CVEs0 on KEV0 new
UT9.8
Unified Threat Management Firewall
Comodo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-20090 | DB Dragon Browser Comodo | 7.8 | Jun 19 | Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path |
| CVE-2016-20088 | CB Chromodo Browser Comodo | 7.8 | Jun 19 | Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation |
| CVE-2019-25430 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via vpn_users |
| CVE-2019-25429 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via openvpn_advanced |
| CVE-2019-25428 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via openvpn_users |
| CVE-2019-25427 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via antispyware |
| CVE-2019-25426 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via dnsmasq |
| CVE-2019-25425 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via smtpconfig |
| CVE-2019-25424 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via https_exceptions |
| CVE-2019-25423 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig |
| CVE-2019-25422 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via vpnfw |
| CVE-2019-25421 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via policyfw |
| CVE-2019-25420 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via snat |
| CVE-2019-25419 | CD Comodo Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via schedule |
| CVE-2019-25418 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via fwgroups |
| CVE-2019-25417 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via QoS Rules |
| CVE-2019-25416 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via device Parameter |
| CVE-2019-25415 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via hotspot_permanent_users |
| CVE-2019-25414 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via ID Parameter Appid |
| CVE-2019-25413 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via ID Parameter |
| CVE-2019-25412 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via NTP_SERVER_LIST |
| CVE-2019-25411 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via DHCP |
| CVE-2019-25410 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via policy_routing |
| CVE-2019-25409 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via routing |
| CVE-2019-25408 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via netwizard2 |
| CVE-2019-25407 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via backupschedule |
| CVE-2019-25406 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via organization Parameter |
| CVE-2019-25405 | CD Comodo Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via license_activation |
| CVE-2019-25404 | CD Comodo Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via admins |
| CVE-2019-25403 | CD Comodo Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via admin_profiles |
| CVE-2019-25402 | CD Comodo Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 Cross-Site Scripting via login |
| CVE-2025-8206 | DR Dragon Comodo | 4.7 | Jul 26 | Comodo Dragon IP DNS Leakage Detector cross site scripting |
| CVE-2025-8205 | DR Dragon Comodo | 3.7 | Jul 26 | Comodo Dragon IP DNS Leakage Detector cleartext transmission |
| CVE-2025-8204 | DR Dragon Comodo | 3.7 | Jul 26 | Comodo Dragon HSTS security check |
| CVE-2025-7098 | IS Internet Security Premium Comodo | 8.8 | Jul 6 | Comodo Internet Security Premium File Name path traversal |
| CVE-2025-7097 | IS Internet Security Premium Comodo | 8.8 | Jul 6 | Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection |
| CVE-2025-7096 | IS Internet Security Premium Comodo | 8.8 | Jul 6 | Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity check |
| CVE-2025-7095 | IS Internet Security Premium Comodo | 6.1 | Jul 6 | Comodo Internet Security Premium Update certificate validation |
| CVE-2024-7252 | IS Internet Security Pro Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7251 | IS Internet Security Pro Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7250 | IS Internet Security Pro Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7249 | FI Firewall Comodo | 7.8 | Jul 29 | Comodo Firewall Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7248 | IS Internet Security Pro Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability |
| CVE-2022-34008 | AN Antivirus Comodo | 7.8 | Jun 21 | Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation |
| CVE-2019-18215 | CI Comodo Internet Security Comodo | 7.8 | Nov 18 | An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0 |
| CVE-2019-14694 | AN Antivirus Comodo | 4.7 | Aug 28 | A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP… |
| CVE-2019-14270 | FI Firewall Comodo | 7.1 | Jul 25 | Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are… |
| CVE-2019-3973 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port "cmdServicePort" |
| CVE-2019-3972 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>_CisSharedMemBuff" |
| CVE-2019-3971 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort" |
| CVE-2019-3970 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database |
| CVE-2019-3969 | AN Antivirus Comodo | 7.8 | Jul 17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients |
| CVE-2018-17431 | UT Unified Threat Management Firewall Comodo | 9.8 | Jan 29 | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL |
| CVE-2014-7872 | GE Geekbuddy Comodo | – | Jun 9 | Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server |
| CVE-2014-9633 | BA Backup Comodo | – | Feb 3 | The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference |
| CVE-2011-5123 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revoked, which has… |
| CVE-2011-5122 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) via a crafted compressed file |
| CVE-2011-5121 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which has unknown impact and… |
| CVE-2011-5120 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service (application crash) via a crafted .PST file |
| CVE-2011-5119 | CI Comodo Internet Security Comodo | – | Aug 26 | Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors |
