3
CVEs
0
Critical
3
High
0
KEV
3
PoC
3
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
3
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Dome Firewall
29
Antivirus
10
Internet Security
9
Comodo Antivirus
9
Gateway
6
Nprotect Antivirus
6
Sophos
6
Sophos Anti Virus
6
Esafe
6
Scan Engine
6
Bitdefender
6
Rising Antivirus
5
F Prot Antivirus
5
F Secure Anti Virus
5
Quick Heal
4
Command Antivirus
4
Cat
4
Ikarus Virus Utilities T3 Command Line Scanner
4
Norman Antivirus Antispyware
4
Panda Antivirus
4
Anti Malware
4
Fortinet Antivirus
3
V3 Internet Security
3
Comodo Internet Security
3
Anti Virus
3
Trend Micro
3
Trend Micro Antivirus
3
Eset
3
Symantec
3
Nod32 Antivirus
3
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-49494 | Remote denial of service in Comodo Internet Security's Inspect.sys firewall driver lets an unauthenticated attacker crash any Windows host running the product by sending a single crafted IPv6 packet, even when all ports are blocked at the firewall. The flaw is an integer underflow (CWE-191) in IPv6 extension-header parsing that occurs before firewall rule enforcement, producing an out-of-bounds read and an oversized memcpy at DISPATCH_LEVEL and an immediate BSOD. Publicly available exploit code exists, published alongside MalwareTech's technical writeup and a working PoC named ComoDoS. | HIGH | 8.7 | 0.1% | 64 |
PoC
No patch
|
| CVE-2016-20090 | Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.1% | 63 |
PoC
No patch
|
| CVE-2016-20088 | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.1% | 63 |
PoC
No patch
|