CVE-2025-8204— Comodo Dragon HSTS security check
Quick assessment
Affected
Comodo Dragon
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Comodo Dragon是中国科摩多（Comodo）公司的一款网络浏览器。 Comodo Dragon 134.0.6998.179及之前版本存在安全特征问题漏洞，该漏洞源于组件HSTS Handler安全检查不足。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-8204
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Comodo Dragon HSTS security check
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179. Affected by this vulnerability is an unknown functionality of the component HSTS Handler. The manipulation leads to security check for standard. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不恰当实现的标准安全检查
Source: CVE Program / CVE List V5
Vulnerability Title
Comodo Dragon 安全特征问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Comodo Dragon是中国科摩多（Comodo）公司的一款网络浏览器。 Comodo Dragon 134.0.6998.179及之前版本存在安全特征问题漏洞，该漏洞源于组件HSTS Handler安全检查不足。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-8204
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-8204
请登录查看更多情报信息。
Same Patch Batch · Comodo · 2025-07-26 · 3 CVEs total
| CVE-2025-8205 | 3.7 LOW | Comodo Dragon IP DNS Leakage Detector cleartext transmission |
| CVE-2025-8206 | 3.1 LOW | Comodo Dragon IP DNS Leakage Detector cross site scripting |
IV. Related Vulnerabilities
Same vendor: Comodo
-
CVE-2016-20090
Comodo Dragon Browser 52.15.25.663 Privilege Escalation via -
CVE-2016-20088
Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path P -
CVE-2019-25430
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting vi -
CVE-2019-25429
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting vi -
CVE-2019-25428
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via openvpn_
Same weakness: CWE-358
-
CVE-2026-46582
A wildcard replay, as another piece of data, triggers poison -
CVE-2026-65058
Trezor Safe improper security check in on-device display -
CVE-2026-49783
Secure Boot Security Feature Bypass Vulnerability -
CVE-2026-54431
Improper Data Validation in liboauth2 -
CVE-2026-12577
DVP80ES3 Improperly Implemented Security Check for Standard
V. Comments for CVE-2025-8204
No comments yet