Forticlientmac (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2025-10-14. Vendor: Fortinet.
CVEs of Forticlientmac
- CVE-2025-57741 - CVSS 7.8 (high), 2025-10-14: An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions…
- CVE-2025-46774 - CVSS 7.8 (high), 2025-10-14: An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below,…
- CVE-2025-31365 - CVSS 7.1 (high), 2025-10-14: An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an…
- CVE-2025-25251 - CVSS 7.8 (high), 2025-05-28: An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local…
- CVE-2024-35281 - CVSS 7.8 (high), 2025-05-13: An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and…
- CVE-2023-45588 - CVSS 8.2 (high), 2025-03-14: An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a…
- CVE-2024-52968 - CVSS 8.4 (high), 2025-02-11: An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.
- CVE-2024-50570 - CVSS 5 (medium), 2024-12-18: A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and…
- CVE-2024-40592 - CVSS 7.5 (high), 2024-11-12: An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and…
- CVE-2024-31489 - CVSS 8.1 (high), 2024-09-10: AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0…
- CVE-2022-45856 - CVSS 5.9 (medium), 2024-09-10: An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0…
- CVE-2024-31492 - CVSS 8.2 (high), 2024-04-10: An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a…
- CVE-2023-37939 - CVSS 3.3 (low), 2023-10-10: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions,…
- CVE-2023-22635 - CVSS 7.8 (high), 2023-04-11: A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all…
- CVE-2021-41028 - CVSS 8.2 (high), 2021-12-16: A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate…
- CVE-2019-5585 - CVSS 6.1 (medium), 2019-04-09: An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application's performance via modifying the…
