# Fortinet FortiClientWindows.

Every CVE that names Fortinet FortiClientWindows among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Fortinet FortiClientWindows: A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7…](https://agentprime.io/advisories/CVE-2026-84386.md)
  `CVE-2026-84386` · CVE record: Fortinet FortiClientWindows · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-283
- [Buffer overflow in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2026-70465.md)
  `CVE-2026-70465` · CVE record: Fortinet FortiClientWindows · CVSS 7.3 High · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption
- [Hard-coded cryptographic key in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2026-44278.md)
  `CVE-2026-44278` · CVE record: Fortinet FortiClientWindows · CVSS 2.1 Low · Not analysed yet · Published 12 May 2026 · Tags: Hard-coded credentials
- [Symlink following in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2025-62676.md)
  `CVE-2025-62676` · CVE record: Fortinet FortiClientWindows · CVSS 6.4 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Path traversal
- [Active debug code in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2025-54660.md)
  `CVE-2025-54660` · CVE record: Fortinet FortiClientWindows · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-489
- [Heap-based buffer overflow in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2025-46373.md)
  `CVE-2025-46373` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 18 Nov 2025 · Tags: Memory corruption
- [Fortinet FortiClientWindows: An Exposed IOCTL with Insufficient Access Control vulnerability \[CWE-782\] vulnerability…](https://agentprime.io/advisories/CVE-2025-47761.md)
  `CVE-2025-47761` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-782
- [Uncontrolled search path in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2025-57716.md)
  `CVE-2025-57716` · CVE record: Fortinet FortiClientWindows · CVSS 6.0 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-427
- [Improper certificate validation in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2024-54019.md)
  `CVE-2024-54019` · CVE record: Fortinet FortiClientWindows · CVSS 4.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Weak cryptography or TLS
- [Fortinet FortiClientWindows: A exposure of sensitive system information to an unauthorized control sphere…](https://agentprime.io/advisories/CVE-2025-24473.md)
  `CVE-2025-24473` · CVE record: Fortinet FortiClientWindows · CVSS 4.8 Medium · Not analysed yet · Published 28 May 2025 · Tags: Information disclosure
- [FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately de…](https://agentprime.io/advisories/CVE-2020-9295.md)
  `CVE-2020-9295` · CVE record: Fortinet FortiClientWindows · CVSS 4.7 Medium · Not analysed yet · Published 17 Mar 2025 · Tags: CWE-358
- [Improper access control in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2024-40586.md)
  `CVE-2024-40586` · CVE record: Fortinet FortiClientWindows · CVSS 6.3 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Broken access control
- [Hard-coded cryptographic key in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2024-50564.md)
  `CVE-2024-50564` · CVE record: Fortinet FortiClientWindows · CVSS 3.2 Low · Not analysed yet · Published 14 Jan 2025 · Tags: Hard-coded credentials
- [Cleartext storage of sensitive information in Fortinet FortiClientMac and others](https://agentprime.io/advisories/CVE-2024-50570.md)
  `CVE-2024-50570` · CVE record: Fortinet FortiClientMac and 2 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: Information disclosure
- [Authentication bypass in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2024-47574.md)
  `CVE-2024-47574` · CVE record: Fortinet FortiClientWindows · CVSS 7.4 High · Not analysed yet · Published 13 Nov 2024 · Tags: Authentication bypass
- [Untrusted search path in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2024-36507.md)
  `CVE-2024-36507` · CVE record: Fortinet FortiClientWindows · CVSS 6.7 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-426
- [A privilege context switching error vulnerability \[CWE-270\] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate thei…](https://agentprime.io/advisories/CVE-2024-36513.md)
  `CVE-2024-36513` · CVE record: Fortinet FortiClientWindows · CVSS 7.4 High · Not analysed yet · Published 12 Nov 2024 · Tags: Privilege escalation
- [Improper certificate validation in Fortinet FortiClientiOS and others](https://agentprime.io/advisories/CVE-2022-45856.md)
  `CVE-2022-45856` · CVE record: Fortinet FortiClientiOS and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Fortinet FortiClientMac and others](https://agentprime.io/advisories/CVE-2024-31489.md)
  `CVE-2024-31489` · CVE record: Fortinet FortiClientMac and 3 more · CVSS 6.4 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: Weak cryptography or TLS
- [Incorrect authorization in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2022-40681.md)
  `CVE-2022-40681` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 14 Nov 2023 · Tags: Broken access control
- [Hard-coded credentials in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2023-33304.md)
  `CVE-2023-33304` · CVE record: Fortinet FortiClientWindows · CVSS 4.4 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Hard-coded credentials
- [Untrusted search path in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2023-41840.md)
  `CVE-2023-41840` · CVE record: Fortinet FortiClientWindows · CVSS 7.4 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-426
- [Information disclosure in Fortinet FortiClientMac and others](https://agentprime.io/advisories/CVE-2023-37939.md)
  `CVE-2023-37939` · CVE record: Fortinet FortiClientMac and 2 more · CVSS 3.0 Low · Not analysed yet · Published 10 Oct 2023 · Tags: Information disclosure
- [Incorrect default permissions in Fortinet FortiConverter and others](https://agentprime.io/advisories/CVE-2022-33877.md)
  `CVE-2022-33877` · CVE record: Fortinet FortiConverter and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: Broken access control
- [Incorrect permission assignment in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2022-43946.md)
  `CVE-2022-43946` · CVE record: Fortinet FortiClientWindows · CVSS 7.3 High · Not analysed yet · Published 11 Apr 2023 · Tags: Broken access control
- [Path traversal in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2022-42470.md)
  `CVE-2022-42470` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 11 Apr 2023 · Tags: Path traversal
- [Incorrect authorization in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2022-40682.md)
  `CVE-2022-40682` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 11 Apr 2023 · Tags: Broken access control
- [A relative path traversal vulnerability \[CWE-23\] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their pri…](https://agentprime.io/advisories/CVE-2021-41031.md)
  `CVE-2021-41031` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 7.8 High · Not analysed yet · Published 18 Jul 2022
- [An execution with unnecessary privileges vulnerability \[CWE-250\] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10 may allow a local attacker t…](https://agentprime.io/advisories/CVE-2022-26113.md)
  `CVE-2022-26113` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 7.7 High · Not analysed yet · Published 18 Jul 2022
- [Fortinet FortiClientWindows: A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and…](https://agentprime.io/advisories/CVE-2021-43066.md)
  `CVE-2021-43066` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 8.4 High · Not analysed yet · Published 11 May 2022
- [A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative…](https://agentprime.io/advisories/CVE-2021-44169.md)
  `CVE-2021-44169` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 8.2 High · Not analysed yet · Published 6 Apr 2022
- [An improper authorization vulnerabiltiy \[CWE-285\] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control v…](https://agentprime.io/advisories/CVE-2021-36167.md)
  `CVE-2021-36167` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 4.3 Medium · Not analysed yet · Published 9 Dec 2021
- [Fortinet FortiClientWindows: A improper control of a resource through its lifetime in Fortinet FortiClientWindows…](https://agentprime.io/advisories/CVE-2021-43204.md)
  `CVE-2021-43204` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 4.4 Medium · Not analysed yet · Published 9 Dec 2021
- [An improper authorization vulnerability \[CWE-285\] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTE…](https://agentprime.io/advisories/CVE-2021-36183.md)
  `CVE-2021-36183` · CVE record: Fortinet Fortinet FortiClientWindows · CVSS 7.4 High · Not analysed yet · Published 2 Nov 2021
- [Untrusted search path in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2020-9290.md)
  `CVE-2020-9290` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 15 Mar 2020 · Tags: CWE-426
- [An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executabl…](https://agentprime.io/advisories/CVE-2019-17658.md)
  `CVE-2019-17658` · CVE record: Fortinet Fortinet FortiClientWindows · No CVSS score · Not analysed yet · Published 12 Mar 2020
- [A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, whi…](https://agentprime.io/advisories/CVE-2018-9193.md)
  `CVE-2018-9193` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 30 May 2019
- [Untrusted search path in Fortinet FortiClientWindows](https://agentprime.io/advisories/CVE-2019-5589.md)
  `CVE-2019-5589` · CVE record: Fortinet FortiClientWindows · CVSS 8.6 High · Not analysed yet · Published 28 May 2019 · Tags: CWE-426

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fortinet-forticlientwindows>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fortinet-forticlientwindows/>. Everything for agents: <https://agentprime.io/llms.txt>.