FO
Product
FortiClientWindows
21
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 7Low 2
Watch
Add FortiClientWindows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36513 | 8.8 | Nov 12 | A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated… Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.12; 6.4.0 through 6.4.10 |
| CVE-2019-5589 | 8.8 | May 28 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable Affected: 6.0.0 through 6.0.5; 5.6.0 through 5.6.6; 5.4.0 through 5.4.5; 5.2.0 through 5.2.6; 5.0.0 through 5.0.11; 4.3.0 through 4.3.5; +4 more |
| CVE-2026-70465 | 8.1 | Aug 12 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.11 |
| CVE-2024-31489 | 8.1 | Sep 10 | AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and… Affected: 7.2.0 through 7.2.2; 7.0.0 through 7.0.11 |
| CVE-2025-46373 | 7.8 | Nov 18 | A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.8 |
| CVE-2025-47761 | 7.8 | Nov 18 | An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.9 |
| CVE-2024-47574 | 7.8 | Nov 13 | A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10… Affected: 7.4.0; 7.2.0 through 7.2.4; 7.0.0 through 7.0.12; 6.4.0 through 6.4.10 |
| CVE-2024-36507 | 7.8 | Nov 12 | A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL… Affected: 7.4.0; 7.2.0 through 7.2.4; 7.0.0 through 7.0.12 |
| CVE-2020-9290 | 7.8 | Mar 15 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable Affected: 6.2.3 |
| CVE-2020-9295 | 7.5 | Mar 17 | FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below… Affected: 6.2.0 through 6.2.6; 6.0.0 through 6.0.10 |
| CVE-2025-57716 | 7.3 | Oct 14 | An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.11; 7.0.0 through 7.0.14 |
| CVE-2025-62676 | 7.1 | Feb 10 | An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0… Affected: 7.4.0 through 7.4.4; 7.2.0 through 7.2.12; 7.0.0 through 7.0.14 |
| CVE-2024-40586 | 6.7 | Feb 11 | An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his… Affected: 7.4.0; 7.2.0 through 7.2.6; 7.0.3 through 7.0.13 |
| CVE-2024-54019 | 6.5 | Jun 10 | A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized… Affected: 7.4.0; 7.2.0 through 7.2.6; 7.0.0 through 7.0.14 |
| CVE-2022-45856 | 5.9 | Sep 10 | An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0… Affected: 7.0.0 through 7.0.7; 6.4.0 through 6.4.10 |
| CVE-2026-44278 | 5.5 | May 12 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information… Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.14 |
| CVE-2025-54660 | 5.5 | Nov 18 | An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.10; 7.0.0 through 7.0.14 |
| CVE-2026-84386 | 5.1 | Sep 8 | A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via… Affected: 7.4.0 through 7.4.7; 7.2.0 through 7.2.15 |
| CVE-2024-50570 | 5.0 | Dec 18 | A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux… Affected: 7.4.0; 7.2.0 through 7.2.5; 7.0.0 through 7.0.13 |
| CVE-2025-24473 | 3.7 | May 28 | A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through… Affected: 7.2.0 through 7.2.1; 7.0.13 through 7.0.14 |
| CVE-2024-50564 | 3.3 | Jan 14 | A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user… Affected: 7.4.0; 7.2.0 through 7.2.7; 7.0.0 through 7.0.14; 6.4.0 through 6.4.10 |
Showing 21