Forticlientwindows (Fortinet) - vulnerabilities (CVEs)

20 CVEs, 0 in the last 30 days, 107 known versions, newest CVE from 2026-09-08. Vendor: Fortinet.

CVEs of Forticlientwindows

• CVE-2026-84386 - CVSS 5.1 (medium), 2026-09-08: A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper…
• CVE-2026-70465 - CVSS 8.1 (high), 2026-08-12: A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows…
• CVE-2026-44278 - CVSS 5.5 (medium), 2026-05-12: A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker…
• CVE-2025-62676 - CVSS 7.1 (high), 2026-02-10: An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4,…
• CVE-2025-54660 - CVSS 5.5 (medium), 2025-11-18: An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all…
• CVE-2025-47761 - CVSS 7.8 (high), 2025-11-18: An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows…
• CVE-2025-46373 - CVSS 7.8 (high), 2025-11-18: A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8…
• CVE-2025-57716 - CVSS 7.3 (high), 2025-10-14: An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a…
• CVE-2024-54019 - CVSS 6.5 (medium), 2025-06-10: A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow…
• CVE-2025-24473 - CVSS 4.8 (medium), 2025-05-28: A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1,…
• CVE-2020-9295 - CVSS 7.5 (high), 2025-03-17: FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version…
• CVE-2024-40586 - CVSS 6.7 (medium), 2025-02-11: An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local…
• CVE-2024-50564 - CVSS 3.3 (low), 2025-01-14: A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a…
• CVE-2024-50570 - CVSS 5 (medium), 2024-12-18: A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and…
• CVE-2024-47574 - CVSS 7.8 (high), 2024-11-13: A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through…
• CVE-2024-36507 - CVSS 7.8 (high), 2024-11-12: A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run…
• CVE-2024-36513 - CVSS 8.8 (high), 2024-11-12: A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may…
• CVE-2024-31489 - CVSS 8.1 (high), 2024-09-10: AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0…
• CVE-2022-45856 - CVSS 5.9 (medium), 2024-09-10: An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0…
• CVE-2022-40681 - CVSS 7.1 (high), 2023-11-14: A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial…
• CVE-2023-41840 - CVSS 7.8 (high), 2023-11-14: A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine…
• CVE-2023-33304 - CVSS 5.5 (medium), 2023-11-14: A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections…
• CVE-2023-37939 - CVSS 3.3 (low), 2023-10-10: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions,…
• CVE-2022-33877 - CVSS 7 (high), 2023-06-13: An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter…
• CVE-2022-42470 - CVSS 7.8 (high), 2023-04-11: A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to…
• CVE-2022-40682 - CVSS 7.8 (high), 2023-04-11: A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute…
• CVE-2022-43946 - CVSS 8.1 (high), 2023-04-11: Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU)…
• CVE-2021-41028 - CVSS 8.2 (high), 2021-12-16: A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate…
• CVE-2020-9290 - CVSS 7.8 (high), 2020-03-15: A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
• CVE-2018-9193 - CVSS 7.8 (high), 2019-05-30: A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these…
• CVE-2019-5589 - CVSS 8.8 (high), 2019-05-28: A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable