Comodo Internet Security Hit by Unpatched Zero-Day Vulnerability (ComoDoS) Security researchers have disclosed an unpatched zero-day vulnerability in Comodo Internet Security, dubbed ComoDoS, which allows attackers to remotely crash Windows systems with a single malformed IPv6 packet even bypassing firewall protections. The flaw lies in Comodo’s IPv6 header parser, specifically in how it processes extension headers, which are optional fields in IPv6 packets. By exploiting this weakness, an attacker can trigger a system crash without requiring authentication or user interaction. Despite multiple disclosure attempts, Comodo has not responded or issued a patch, leaving users exposed. The vulnerability poses a significant risk, particularly for organizations relying on Comodo’s security products, as it can be exploited remotely with minimal effort. The discovery underscores the challenges of vendor responsiveness in cybersecurity, especially when critical flaws remain unaddressed. No workaround has been provided, and the full impact of the vulnerability is still under assessment.