Fortinet FortiClientWindows vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fortinet FortiClientWindows: 10 record(s), with affected versions and fixes.
CVE-2026-84386
Medium · 5.1
CWE-283 Sep 8, 2026
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7…
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.
CVE-2026-70465
High · 8.1
CWE-120 Aug 12, 2026
Classic Buffer Overflow in Fortinet FortiClientWindows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.
CVE-2026-44278
Medium · 5.5
CWE-321 May 12, 2026
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0…
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>
CVE-2025-62676
High · 7.1
CWE-59 Feb 10, 2026
Link Following in Fortinet Forticlient
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.
CVE-2025-54660
Medium · 5.5
CWE-489 Nov 18, 2025
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3…
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
CVE-2025-47761
High · 7.8
CWE-782 Nov 18, 2025
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability…
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection.
CVE-2025-46373
High · 7.8
CWE-122 Nov 18, 2025
Heap-based Buffer Overflow in Fortinet Forticlient
A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via "fortips_74.sys". The attacker would need to bypass the Windows heap integrity protections
CVE-2025-57716
High · 7.3
CWE-427 Oct 14, 2025
Uncontrolled Search Path Element in Fortinet Forticlient
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder.
CVE-2020-9290
High · 7.8
CWE-426 Mar 15, 2020
Untrusted Search Path in Fortinet Forticlient
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
CVE-2019-5589
High · 8.8
CWE-426 May 28, 2019
Untrusted Search Path in Fortinet Forticlient
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable