Critical Comodo Internet Security 2025 Flaws Allow Remote Code Execution as SYSTEM

**Executive summary:** Security researchers disclosed critical vulnerabilities in Comodo Internet Security 2025 that allow attackers on the same network to bypass SSL validation for updates, perform DNS/ARP spoofing to redirect update traffic, deliver malicious update packages that execute as SYSTEM, and leverage path traversal in manifests to drop persistent payloads; the report includes PoC commands and mitigation advice while patches are pending.