32
CVEs
0
Critical
6
High
0
KEV
32
PoC
6
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
6
MEDIUM
26
LOW
0
Monthly CVE Trend
Affected Products (30)
Dome Firewall
29
Antivirus
10
Internet Security
9
Comodo Antivirus
9
Gateway
6
Nprotect Antivirus
6
Sophos
6
Sophos Anti Virus
6
Esafe
6
Scan Engine
6
Bitdefender
6
Rising Antivirus
5
F Prot Antivirus
5
F Secure Anti Virus
5
Quick Heal
4
Command Antivirus
4
Cat
4
Ikarus Virus Utilities T3 Command Line Scanner
4
Norman Antivirus Antispyware
4
Panda Antivirus
4
Anti Malware
4
Fortinet Antivirus
3
V3 Internet Security
3
Comodo Internet Security
3
Anti Virus
3
Trend Micro
3
Trend Micro Antivirus
3
Eset
3
Symantec
3
Nod32 Antivirus
3
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-49494 | Remote denial of service in Comodo Internet Security's Inspect.sys firewall driver lets an unauthenticated attacker crash any Windows host running the product by sending a single crafted IPv6 packet, even when all ports are blocked at the firewall. The flaw is an integer underflow (CWE-191) in IPv6 extension-header parsing that occurs before firewall rule enforcement, producing an out-of-bounds read and an oversized memcpy at DISPATCH_LEVEL and an immediate BSOD. Publicly available exploit code exists, published alongside MalwareTech's technical writeup and a working PoC named ComoDoS. | HIGH | 8.7 | 0.1% | 64 |
PoC
No patch
|
| CVE-2016-20090 | Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path running with SYSTEM privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.1% | 63 |
PoC
No patch
|
| CVE-2016-20088 | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.1% | 63 |
PoC
No patch
|
| CVE-2019-25419 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoint. [CVSS 7.2 HIGH] | HIGH | 7.2 | 0.0% | 56 |
PoC
No patch
|
| CVE-2019-25405 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the newLicense parameter. [CVSS 7.2 HIGH] | HIGH | 7.2 | 0.0% | 56 |
PoC
No patch
|
| CVE-2019-25422 | Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint. [CVSS 7.2 HIGH] | HIGH | 7.2 | 0.0% | 56 |
PoC
No patch
|
| CVE-2019-25403 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the comment parameter. [CVSS 6.4 MEDIUM] | MEDIUM | 6.4 | 0.0% | 52 |
PoC
No patch
|
| CVE-2019-25404 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through admin management parameters. [CVSS 6.4 MEDIUM] | MEDIUM | 6.4 | 0.0% | 52 |
PoC
No patch
|
| CVE-2019-25402 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.1% | 51 |
PoC
No patch
|
| CVE-2019-25413 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameter. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.1% | 51 |
PoC
No patch
|
| CVE-2019-25414 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameter. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.1% | 51 |
PoC
No patch
|
| CVE-2019-25430 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.1% | 51 |
PoC
No patch
|
| CVE-2019-25415 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspot_permanent_users endpoint. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.0% | 51 |
PoC
No patch
|
| CVE-2019-25417 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the protocol parameter. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.0% | 51 |
PoC
No patch
|
| CVE-2019-25420 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat endpoint. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.0% | 51 |
PoC
No patch
|