Comodo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Comodo CVE published 2026-06-19

CVE-2016-20088

CVE-2016-20088 is a high-severity vulnerability in Comodo Chromodo Browser 52.15.25.664. The issue is an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. This allows a local attacker to insert malicious executables in the service path, enabling arbitrary code execution with elevated privileges upon service restart or system reboot. defenders should prioritize patchi [truncated]

HIGH Comodo CVE published 2026-06-07

CVE-2026-49494

CVE-2026-49494 is a HIGH-severity vulnerability in Comodo Internet Security's firewall driver Inspect.sys. The vulnerability is caused by an integer underflow in the IPv6 packet parser, which can be triggered by a remote, unauthenticated attacker sending a crafted IPv6 packet. This can lead to a system crash (BSOD) at DISPATCH_LEVEL in the Windows kernel.