CVE-2019-3969

CVE-2019-3969 describes a Local Privilege Escalation vulnerability in Comodo Antivirus versions up to 12.0.0.6810. An authenticated local attacker can exploit a flaw in CmdAgent's COM client handling, specifically by bypassing signature checks via process hollowing, to invoke sensitive COM methods and write to the registry with SYSTEM privileges. This vulnerability carries a CVSS score of 7.8 (High), indicating a low attack complexity and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been confirmed, its presence on the FAUCET Risk Score and limited media coverage suggest some awareness within the security community.