The ChromodoUpdater service in Comodo Chromodo Browser version 52.15.25.664 is configured with an unquoted service path. Because the service runs with SYSTEM privileges, a local attacker who can write to the service path directory can replace the executable with a malicious program. When the service is restarted or the system reboots, the malicious executable will run under SYSTEM rights, providing complete control over the affected machine.

The affected product is Comodo Chromodo Browser, version 52.15.25.664. No other product or version information is provided in the CNA data. The flaw resides solely in the ChromodoUpdater component of this specific browser build.

The CVSS score of 8.5 indicates high severity, and the vulnerability is not listed in the CISA KEV catalog. EPSS data is not available, so the current exploit probability cannot be quantified. However, because the attack requires only local access to write to the service path, the risk of exploitation remains significant for users who have write permissions to that location or to the service registry settings. If an attacker succeeds, they can obtain SYSTEM privileges and potentially compromise the entire system. The attack vector is local; network or remote access is not required.