CVE-2025-8206: Comodo Dragon IP DNS Leakage Detector cross site scripting
A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179. This affects an unknown part of the component IP DNS Leakage Detector. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8206?
CVE-2025-8206 is classified as a problematic vulnerability affecting Comodo Dragon.
How do I fix CVE-2025-8206?
To mitigate CVE-2025-8206, users should update Comodo Dragon to the latest version beyond 134.0.6998.179.
What component is affected by CVE-2025-8206?
CVE-2025-8206 affects the IP DNS Leakage Detector component of Comodo Dragon.
What type of attack is possible with CVE-2025-8206?
CVE-2025-8206 allows for cross site scripting attacks that can be initiated remotely.
Which versions of Comodo Dragon are affected by CVE-2025-8206?
Comodo Dragon versions up to and including 134.0.6998.179 are affected by CVE-2025-8206.