CO
Vendor
Comodo
97
CVEs
0
On KEV
0
New 30D
Products
DF6.1
Dome Firewall
Comodo
29 CVEs0 on KEV0 new
CI7.8
Comodo Internet Security
Comodo
16 CVEs0 on KEV0 new
CA–
Comodo Antivirus
Comodo
10 CVEs0 on KEV0 new
CP–
Comodo Personal Firewall
Comodo
9 CVEs0 on KEV0 new
IS8.8
Internet Security
Comodo
9 CVEs0 on KEV0 new
AN7.8
Antivirus
Comodo
8 CVEs0 on KEV0 new
CF–
Comodo Firewall Pro
Comodo
6 CVEs0 on KEV0 new
DR4.7
Dragon
Comodo
3 CVEs0 on KEV0 new
FI7.8
Firewall
Comodo
2 CVEs0 on KEV0 new
BA–
Backup
Comodo
1 CVEs0 on KEV0 new
CB7.8
Chromodo Browser
Comodo
1 CVEs0 on KEV0 new
DB7.8
Dragon Browser
Comodo
1 CVEs0 on KEV0 new
GE–
Geekbuddy
Comodo
1 CVEs0 on KEV0 new
UT9.8
Unified Threat Management Firewall
Comodo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-20090 | DB Dragon Browser Comodo | 7.8 | Jun 19 | Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path |
| CVE-2016-20088 | CB Chromodo Browser Comodo | 7.8 | Jun 19 | Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation |
| CVE-2019-25430 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to… |
| CVE-2019-25429 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the… |
| CVE-2019-25428 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through… |
| CVE-2019-25427 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware… |
| CVE-2019-25426 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq… |
| CVE-2019-25425 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN… |
| CVE-2019-25424 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the… |
| CVE-2019-25423 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts… |
| CVE-2019-25422 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint |
| CVE-2019-25421 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint |
| CVE-2019-25420 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat… |
| CVE-2019-25419 | DF Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule… |
| CVE-2019-25418 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSES… |
| CVE-2019-25417 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the protocol… |
| CVE-2019-25416 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through the device… |
| CVE-2019-25415 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the… |
| CVE-2019-25414 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID… |
| CVE-2019-25413 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID… |
| CVE-2019-25412 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input through the… |
| CVE-2019-25411 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the GATEWAY_GREEN parameter |
| CVE-2019-25410 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and destination parameters |
| CVE-2019-25409 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destination parameter |
| CVE-2019-25408 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the… |
| CVE-2019-25407 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup… |
| CVE-2019-25406 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the organization parameter |
| CVE-2019-25405 | DF Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the newLicense… |
| CVE-2019-25404 | DF Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through… |
| CVE-2019-25403 | DF Dome Firewall Comodo | 5.4 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the… |
| CVE-2019-25402 | DF Dome Firewall Comodo | 6.1 | Feb 19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to… |
| CVE-2025-8206 | DR Dragon Comodo | 4.7 | Jul 26 | A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179 |
| CVE-2025-8205 | DR Dragon Comodo | 3.7 | Jul 26 | A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179 |
| CVE-2025-8204 | DR Dragon Comodo | 3.7 | Jul 26 | A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179 |
| CVE-2025-7098 | IS Internet Security Comodo | 8.8 | Jul 6 | A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162 |
| CVE-2025-7097 | IS Internet Security Comodo | 8.8 | Jul 6 | A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162 |
| CVE-2025-7096 | IS Internet Security Comodo | 8.8 | Jul 6 | A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162 |
| CVE-2025-7095 | IS Internet Security Comodo | 6.1 | Jul 6 | A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162 |
| CVE-2024-7252 | IS Internet Security Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7251 | IS Internet Security Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7250 | IS Internet Security Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7249 | FI Firewall Comodo | 7.8 | Jul 29 | Comodo Firewall Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-7248 | IS Internet Security Comodo | 7.8 | Jul 29 | Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability |
| CVE-2022-34008 | AN Antivirus Comodo | 7.8 | Jun 21 | Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation |
| CVE-2019-18215 | CI Comodo Internet Security Comodo | 7.8 | Nov 18 | An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0 |
| CVE-2019-14694 | AN Antivirus Comodo | 4.7 | Aug 28 | A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP… |
| CVE-2019-14270 | AN Antivirus Comodo | 7.1 | Jul 25 | Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are… |
| CVE-2019-3973 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port "cmdServicePort" |
| CVE-2019-3972 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object "<GUID>_CisSharedMemBuff" |
| CVE-2019-3971 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port "cmdvrtLPCServerPort" |
| CVE-2019-3970 | AN Antivirus Comodo | 5.5 | Jul 17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database |
| CVE-2019-3969 | AN Antivirus Comodo | 7.8 | Jul 17 | Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients |
| CVE-2018-17431 | UT Unified Threat Management Firewall Comodo | 9.8 | Jan 29 | Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL |
| CVE-2014-7872 | GE Geekbuddy Comodo | – | Jun 9 | Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server |
| CVE-2014-9633 | BA Backup Comodo | – | Feb 3 | The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference |
| CVE-2011-5123 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revoked, which has… |
| CVE-2011-5122 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) via a crafted compressed file |
| CVE-2011-5121 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which has unknown impact and… |
| CVE-2011-5120 | CI Comodo Internet Security Comodo | – | Aug 26 | The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service (application crash) via a crafted .PST file |
| CVE-2011-5119 | CI Comodo Internet Security Comodo | – | Aug 26 | Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors |