Comodo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Comodo CVE published 2026-06-19

CVE-2016-20088

CVE-2016-20088 is a high-severity vulnerability in Comodo Chromodo Browser 52.15.25.664. The vulnerability is caused by an unquoted service path in the ChromodoUpdater service, which runs with SYSTEM privileges. A local attacker can exploit this vulnerability by inserting a malicious executable in the service path, allowing them to execute arbitrary code with elevated privileges upon service restart or system reboot.

HIGH Comodo CVE published 2026-06-07

CVE-2026-49494

CVE-2026-49494 is a HIGH-severity vulnerability in Comodo Internet Security's firewall driver Inspect.sys. The vulnerability is caused by an integer underflow in the IPv6 packet parser, which can be triggered by a remote, unauthenticated attacker sending a crafted IPv6 packet. This can lead to a system crash (BSOD) at DISPATCH_LEVEL in the Windows kernel.