CVE-2019-14694: Comodo Antivirus

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container.

Affected products

• Comodo Antivirus: version 12.0.0.6870 only

Published 2019-08-28. Last modified 2026-06-17.