CVE-2019-3969 - CVE House
Back to Database
Status published High CVE-2019-3969

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local...

Vulnerability Description

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgent such as writing to the registry with SYSTEM privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3969

Credits & Attribution

No credits recorded in the NVD database.

References

More from Comodo

View All →
CVE-2025-8206
Comodo Dragon IP DNS Leakage Detector cross site scripting
Low 2.3
CVE-2025-8205
Comodo Dragon IP DNS Leakage Detector cleartext transmission
Medium 6.3
CVE-2025-8204
Comodo Dragon HSTS security check
Low 2.3
CVE-2025-7098
Comodo Internet Security Premium File Name path traversal
Medium 6.3
CVE-2025-7097
Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injection
Critical 9.2

Affected Vendor

Affected Software

Comodo Antivirus
Vulnerable Versions:
Versions 12.0.0.6810 and below

Timeline

Official Publish: July 17th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.