Skip to content

Comodo · weakness class

File and Path Handling

10 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Comodo Internet Security Premium File Name path traversalCVE-2025-7098Comodo · CVSS 5.6 · 0.7% likely

    CWE-22

  2. An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.…CVE-2019-18215Comodo · 0.6% likely

    CWE-427

  3. Comodo Antivirus 12.2.2.8012 has a quarantine flaw that allows privilege escalation. To escalate privilege, a low-privileged attacker can use an NTFS directory junction to restore…CVE-2022-34008Comodo · 0.5% likely

    CWE-59

  4. Comodo Internet Security Pro Directory Traversal Local Privilege Escalation VulnerabilityCVE-2024-7248Comodo · CVSS 7.8 · 0.5% likely

    CWE-22

  5. Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation VulnerabilityCVE-2024-7252Comodo · CVSS 7.8 · 0.3% likely

    CWE-59

  6. Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation VulnerabilityCVE-2024-7251Comodo · CVSS 7.8 · 0.3% likely

    CWE-59

  7. Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation VulnerabilityCVE-2024-7250Comodo · CVSS 7.8 · 0.3% likely

    CWE-59

  8. Comodo Firewall Link Following Local Privilege Escalation VulnerabilityCVE-2024-7249Comodo · CVSS 7.8 · 0.3% likely

    CWE-59

  9. Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service PathCVE-2016-20090Comodo · CVSS 7.8 · 0.2% likely

    CWE-428

  10. Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege EscalationCVE-2016-20088Comodo · CVSS 7.8 · 0.2% likely

    CWE-428

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.