Approved changes feed: RSS · Atom

cpe:2.3:a:comodo:internet_security_premium:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorComodo (ae0f5a94-22c5-54dd-8ff5-a3476482174a)
ProductInternet Security Premium (f666b28e-947b-5f54-94b0-384026925e6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7098 vulnerable 2026-06-03 15:12:30.510490 Comodo Internet Security Premium File Name path traversal
MEDIUM (5.6)
A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162. Affected is an unknown function of the component File Name Handler. The manipulation of the argument name/folder leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-06T23:02:05.835Z
Updated: 2025-07-07T15:45:22.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7097 vulnerable 2026-06-03 15:12:30.510009 Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection
HIGH (8.1)
A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation of the argument binary/params leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-06T22:32:05.190Z
Updated: 2025-07-07T15:45:53.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7096 vulnerable 2026-06-03 15:12:30.509316 Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity check
HIGH (8.1)
A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-06T22:02:05.665Z
Updated: 2025-07-07T15:46:23.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7095 vulnerable 2026-06-03 15:12:30.507440 Comodo Internet Security Premium Update certificate validation
LOW (3.7)
A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-06T21:32:06.051Z
Updated: 2025-07-07T15:49:16.811Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.