# cve.now: Comodo

The newest entries naming Comodo as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2016-20090](https://cve.now/CVE-2016-20090.md): Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path (CVSS 8.5)
- [CVE-2016-20088](https://cve.now/CVE-2016-20088.md): Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation (CVSS 8.5)
- [CVE-2019-25430](https://cve.now/CVE-2019-25430.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via vpn\_users (CVSS 5.1)
- [CVE-2019-25429](https://cve.now/CVE-2019-25429.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via openvpn\_advanced (CVSS 5.1)
- [CVE-2019-25428](https://cve.now/CVE-2019-25428.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via openvpn\_users (CVSS 5.1)
- [CVE-2019-25427](https://cve.now/CVE-2019-25427.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via antispyware (CVSS 5.1)
- [CVE-2019-25426](https://cve.now/CVE-2019-25426.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via dnsmasq (CVSS 5.1)
- [CVE-2019-25425](https://cve.now/CVE-2019-25425.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via smtpconfig (CVSS 5.1)
- [CVE-2019-25424](https://cve.now/CVE-2019-25424.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via https\_exceptions (CVSS 5.1)
- [CVE-2019-25423](https://cve.now/CVE-2019-25423.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig (CVSS 5.1)
- [CVE-2019-25422](https://cve.now/CVE-2019-25422.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via vpnfw (CVSS 5.3)
- [CVE-2019-25421](https://cve.now/CVE-2019-25421.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via policyfw (CVSS 5.1)
- [CVE-2019-25420](https://cve.now/CVE-2019-25420.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via snat (CVSS 5.1)
- [CVE-2019-25419](https://cve.now/CVE-2019-25419.md): Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via schedule (CVSS 5.3)
- [CVE-2019-25418](https://cve.now/CVE-2019-25418.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via fwgroups (CVSS 5.1)
- [CVE-2019-25417](https://cve.now/CVE-2019-25417.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via QoS Rules (CVSS 5.1)
- [CVE-2019-25416](https://cve.now/CVE-2019-25416.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via device Parameter (CVSS 5.1)
- [CVE-2019-25415](https://cve.now/CVE-2019-25415.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via hotspot\_permanent\_users (CVSS 5.1)
- [CVE-2019-25414](https://cve.now/CVE-2019-25414.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via ID Parameter Appid (CVSS 5.1)
- [CVE-2019-25413](https://cve.now/CVE-2019-25413.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via ID Parameter (CVSS 5.1)
- [CVE-2019-25412](https://cve.now/CVE-2019-25412.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via NTP\_SERVER\_LIST (CVSS 5.1)
- [CVE-2019-25411](https://cve.now/CVE-2019-25411.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via DHCP (CVSS 5.1)
- [CVE-2019-25410](https://cve.now/CVE-2019-25410.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via policy\_routing (CVSS 5.1)
- [CVE-2019-25409](https://cve.now/CVE-2019-25409.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via routing (CVSS 5.1)
- [CVE-2019-25408](https://cve.now/CVE-2019-25408.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via netwizard2 (CVSS 5.1)
- [CVE-2019-25407](https://cve.now/CVE-2019-25407.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via backupschedule (CVSS 5.1)
- [CVE-2019-25406](https://cve.now/CVE-2019-25406.md): Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via organization Parameter (CVSS 5.1)
- [CVE-2019-25405](https://cve.now/CVE-2019-25405.md): Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via license\_activation (CVSS 5.3)
- [CVE-2019-25404](https://cve.now/CVE-2019-25404.md): Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via admins (CVSS 5.1)
- [CVE-2019-25403](https://cve.now/CVE-2019-25403.md): Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via admin\_profiles (CVSS 5.1)
- [CVE-2019-25402](https://cve.now/CVE-2019-25402.md): Comodo Dome Firewall 2.7.0 Cross-Site Scripting via login (CVSS 5.1)
- [CVE-2025-8206](https://cve.now/CVE-2025-8206.md): Comodo Dragon IP DNS Leakage Detector cross site scripting (CVSS 2.3)
- [CVE-2025-8205](https://cve.now/CVE-2025-8205.md): Comodo Dragon IP DNS Leakage Detector cleartext transmission (CVSS 6.3)
- [CVE-2025-8204](https://cve.now/CVE-2025-8204.md): Comodo Dragon HSTS security check (CVSS 2.3)
- [CVE-2025-7098](https://cve.now/CVE-2025-7098.md): Comodo Internet Security Premium File Name path traversal (CVSS 6.3)
- [CVE-2025-7097](https://cve.now/CVE-2025-7097.md): Comodo Internet Security Premium Manifest File cis\_update\_x64.xml os command injection (CVSS 9.2)
- [CVE-2025-7096](https://cve.now/CVE-2025-7096.md): Comodo Internet Security Premium Manifest File cis\_update\_x64.xml integrity check (CVSS 9.2)
- [CVE-2025-7095](https://cve.now/CVE-2025-7095.md): Comodo Internet Security Premium Update certificate validation (CVSS 6.3)
- [CVE-2024-7252](https://cve.now/CVE-2024-7252.md): Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-7251](https://cve.now/CVE-2024-7251.md): Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-7250](https://cve.now/CVE-2024-7250.md): Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-7249](https://cve.now/CVE-2024-7249.md): Comodo Firewall Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-7248](https://cve.now/CVE-2024-7248.md): Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2019-3969](https://cve.now/CVE-2019-3969.md): Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/comodo
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.