Comodo · Comodo Dragon · CVE-2025-8206
**Name of the Vulnerable Software and Affected Versions**
Comodo Dragon versions up to 134.0.6998.179
**Description**
A cross-site scripting issue exists in Comodo Dragon’s IP DNS Leakage Detector component. The issue is remotely exploitable, but requires a high level of complexity and is considered difficult to exploit. The exploit has been publicly disclosed, and the vendor was notified but did not respond.
**Recommendations**
Versions prior to 134.0.6998.179 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.