Vulnerabilidades do Fortinet FortiClientWindows
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fortinet FortiClientWindows: 10 registro(s), com versões afetadas e correções.
CVE-2026-84386
Média · 5.1
CWE-283 08/09/2026
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7…
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.
CVE-2026-70465
Alta · 8.1
CWE-120 12/08/2026
Classic Buffer Overflow em Fortinet FortiClientWindows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.
CVE-2026-44278
Média · 5.5
CWE-321 12/05/2026
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0…
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>
CVE-2025-62676
Alta · 7.1
CWE-59 10/02/2026
Link Following em Fortinet Forticlient
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.
CVE-2025-54660
Média · 5.5
CWE-489 18/11/2025
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3…
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
CVE-2025-47761
Alta · 7.8
CWE-782 18/11/2025
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability…
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection.
CVE-2025-46373
Alta · 7.8
CWE-122 18/11/2025
Heap-based Buffer Overflow em Fortinet Forticlient
A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via "fortips_74.sys". The attacker would need to bypass the Windows heap integrity protections
CVE-2025-57716
Alta · 7.3
CWE-427 14/10/2025
Uncontrolled Search Path Element em Fortinet Forticlient
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder.
CVE-2020-9290
Alta · 7.8
CWE-426 15/03/2020
Untrusted Search Path em Fortinet Forticlient
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
CVE-2019-5589
Alta · 8.8
CWE-426 28/05/2019
Untrusted Search Path em Fortinet Forticlient
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable