Comodo vulnerabilitiesNone on the known-exploited list.
Comodo has 59 published vulnerabilities across 10 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Comodo Internet Security, with 16. If you run Comodo software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Comodo products have the most vulnerabilities?
Comodo Internet Security leads with 16 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Comodo vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Comodo's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Comodo flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 84%CVE-2018-17431Critical
Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.
- 31%CVE-2008-0470Critical
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.
- 14%CVE-2012-1438Medium
The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location.
All Comodo products we track.
10 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Comodo Internet Securitycomodo_internet_security16 vulnerabilities41 versions
- Comodo Antiviruscomodo_antivirus10 vulnerabilities3 versions
- Comodo Personal Firewallcomodo_personal_firewall9 vulnerabilities1 version
- Internet Securityinternet_security9 vulnerabilities3 versions
- Antivirusantivirus8 vulnerabilities7 versions
- Comodo Firewall Procomodo_firewall_pro6 vulnerabilities3 versions
- Firewallfirewall2 vulnerabilities2 versions
- Backupbackup1 vulnerability1 version
- Geekbuddygeekbuddy1 vulnerability1 version
- Unified Threat Management Firewallunified_threat_management_firewall1 vulnerability2 versions
Running Comodo? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
- Matched to
- Comodo Antivirus on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 59 published vulnerabilities across 10 products and 64 versions from Comodo.
None of Comodo's vulnerabilities is on the list of flaws known to be exploited today.
Comodo Internet Security, with 16 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Comodo products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.