Xcitium vulnerabilities
We track 3 vulnerabilities in Xcitium products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 7, 2026.
Latest Xcitium vulnerabilities
- 7.5 High severity
Comodo Internet Security: Integer Underflow (Wrap or Wraparound)
Xcitium Client Security (XCS) before 13.8.2.10019 and Comodo Internet Security (CIS) through 12.3.4.8162 (fix expected by 2026 Q3) contain an integer underflow vulnerability in the firewall driver Inspect.sys that allows remote unauthenticated attackers to cra
- 8.8 High severity
Openedr: Uncontrolled Search Path Element
A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product. By redirecting this path to a user-writable location, an attacker can cause OpenEDR to lo
- 7.8 High severity
Openedr: Execution with Unnecessary Privileges
A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe). This allows unauthorized interaction with the OpenEDR kernel driver, granting acc