CVE-2019-3969: comodo antivirus
Vulnerability summary
CVE-2019-3969 is a high (CVSS 7.8) vulnerability in comodo antivirus. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 17-07-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgent such as writing to the registry with SYSTEM privileges.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.56%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
0.00 pp
From 0.56% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (tenable.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Comodo2 products
- antivirus≤ 12.0.0.6810
- comodo_antivirusVersions 12.0.0.6810 and below
1 vendor · 2 products