What’s Vulnerable › Vulnerabilities

CVE-2025-7096: Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity check

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-07-06 · updated 2026-06-17
• Weakness: CWE-345

Description

A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Comodo Internet Security Pro: 12.3.4.8162

References

• https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
• https://vuldb.com/?ctiid.315010
• https://vuldb.com/?id.315010
• https://vuldb.com/?submit.603713
• https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view

Get alerted when CVE-2025-7096 or the next vulnerability affects your stack