Comodo Internet Security vulnerabilities

9 known vulnerabilities affecting comodo/internet_security.

Total CVEs
9
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH7MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2025-7097HIGHCVSS 8.2v12.3.4.81622025-07-06
CVE-2025-7097 [HIGH] CWE-77 CVE-2025-7097: A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premiu A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation of the argument binary/params leads to os command injection. The attack may be initiated remotely. The complex
nvd
CVE-2025-7096HIGHCVSS 8.2v12.3.4.81622025-07-06
CVE-2025-7096 [HIGH] CWE-345 CVE-2025-7096: A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. Th A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rathe
nvd
CVE-2025-7098MEDIUMCVSS 6.3v12.3.4.81622025-07-06
CVE-2025-7098 [MEDIUM] CWE-22 CVE-2025-7098: A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12. A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162. Affected is an unknown function of the component File Name Handler. The manipulation of the argument name/folder leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitabili
nvd
CVE-2025-7095MEDIUMCVSS 6.3v12.3.4.81622025-07-06
CVE-2025-7095 [MEDIUM] CWE-287 CVE-2025-7095: A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.816 A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be diff
nvd
CVE-2024-7252HIGHCVSS 7.8v12.2.4.80322024-07-29
CVE-2024-7252 [HIGH] CWE-59 CVE-2024-7252: Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The
nvd
CVE-2024-7251HIGHCVSS 7.8v12.2.4.80322024-07-29
CVE-2024-7251 [HIGH] CWE-59 CVE-2024-7251: Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The
nvd
CVE-2024-7250HIGHCVSS 7.8v12.2.4.80322024-07-29
CVE-2024-7250 [HIGH] CWE-59 CVE-2024-7250: Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The
nvd
CVE-2024-7248HIGHCVSS 7.8v12.2.4.80322024-07-29
CVE-2024-7248 [HIGH] CWE-22 CVE-2024-7248: Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability. This vuln Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The sp
nvd
CVE-2019-14270HIGHCVSS 7.1≤ 12.0.0.68702019-07-25
CVE-2019-14270 [HIGH] CVE-2019-14270: Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Secur Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape.
nvd