Advisories · Technology

Fortinet FortiClientWindows.

Every CVE that names Fortinet FortiClientWindows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84386 CVE record

CVSS 4.7 Medium

Fortinet FortiClientWindows: A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7…
- Fortinet FortiClientWindows
- CWE-283
Not analysed yet 8 Sept 2026
CVE-2026-70465 CVE record

CVSS 7.3 High

Buffer overflow in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Memory corruption
Not analysed yet 12 Aug 2026
CVE-2026-44278 CVE record

CVSS 2.1 Low

Hard-coded cryptographic key in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Hard-coded credentials
Not analysed yet 12 May 2026
CVE-2025-62676 CVE record

CVSS 6.4 Medium

Symlink following in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Path traversal
Not analysed yet 10 Feb 2026
CVE-2025-54660 CVE record

CVSS 4.9 Medium

Active debug code in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-489
Not analysed yet 18 Nov 2025
CVE-2025-46373 CVE record

CVSS 7.1 High

Heap-based buffer overflow in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Memory corruption
Not analysed yet 18 Nov 2025
CVE-2025-47761 CVE record

CVSS 7.1 High

Fortinet FortiClientWindows: An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability…
- Fortinet FortiClientWindows
- CWE-782
Not analysed yet 18 Nov 2025
CVE-2025-57716 CVE record

CVSS 6.0 Medium

Uncontrolled search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-427
Not analysed yet 14 Oct 2025
CVE-2024-54019 CVE record

CVSS 4.4 Medium

Improper certificate validation in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Weak cryptography or TLS
Not analysed yet 10 Jun 2025
CVE-2025-24473 CVE record

CVSS 4.8 Medium

Fortinet FortiClientWindows: A exposure of sensitive system information to an unauthorized control sphere…
- Fortinet FortiClientWindows
- Information disclosure
Not analysed yet 28 May 2025
CVE-2020-9295 CVE record

CVSS 4.7 Medium

FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately de…
- Fortinet FortiClientWindows
- CWE-358
Not analysed yet 17 Mar 2025
CVE-2024-40586 CVE record

CVSS 6.3 Medium

Improper access control in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Broken access control
Not analysed yet 11 Feb 2025
CVE-2024-50564 CVE record

CVSS 3.2 Low

Hard-coded cryptographic key in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Hard-coded credentials
Not analysed yet 14 Jan 2025
CVE-2024-50570 CVE record

CVSS 4.9 Medium

Cleartext storage of sensitive information in Fortinet FortiClientMac and others
- Fortinet FortiClientMac
- Fortinet FortiClientLinux
- Information disclosure
Not analysed yet 18 Dec 2024
CVE-2024-47574 CVE record

CVSS 7.4 High

Authentication bypass in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Authentication bypass
Not analysed yet 13 Nov 2024
CVE-2024-36507 CVE record

CVSS 6.7 Medium

Untrusted search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-426
Not analysed yet 12 Nov 2024
CVE-2024-36513 CVE record

CVSS 7.4 High

A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate thei…
- Fortinet FortiClientWindows
- Privilege escalation
Not analysed yet 12 Nov 2024
CVE-2022-45856 CVE record

CVSS 4.6 Medium

Improper certificate validation in Fortinet FortiClientiOS and others
- Fortinet FortiClientiOS
- Fortinet FortiClientAndroid
- Weak cryptography or TLS
Not analysed yet 10 Sept 2024
CVE-2024-31489 CVE record

CVSS 6.4 Medium

Improper certificate validation in Fortinet FortiClientMac and others
- Fortinet FortiClientMac
- Fortinet FortiClientEMS
- Weak cryptography or TLS
Not analysed yet 10 Sept 2024
CVE-2022-40681 CVE record

CVSS 7.1 High

Incorrect authorization in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Broken access control
Not analysed yet 14 Nov 2023
CVE-2023-33304 CVE record

CVSS 4.4 Medium

Hard-coded credentials in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Hard-coded credentials
Not analysed yet 14 Nov 2023
CVE-2023-41840 CVE record

CVSS 7.4 High

Untrusted search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-426
Not analysed yet 14 Nov 2023
CVE-2023-37939 CVE record

CVSS 3.0 Low

Information disclosure in Fortinet FortiClientMac and others
- Fortinet FortiClientMac
- Fortinet FortiClientWindows
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2022-33877 CVE record

CVSS 6.8 Medium

Incorrect default permissions in Fortinet FortiConverter and others
- Fortinet FortiConverter
- Fortinet FortiClientWindows
- Broken access control
Not analysed yet 13 Jun 2023
CVE-2022-43946 CVE record

CVSS 7.3 High

Incorrect permission assignment in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Broken access control
Not analysed yet 11 Apr 2023
CVE-2022-42470 CVE record

CVSS 7.1 High

Path traversal in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Path traversal
Not analysed yet 11 Apr 2023
CVE-2022-40682 CVE record

CVSS 7.1 High

Incorrect authorization in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- Broken access control
Not analysed yet 11 Apr 2023
CVE-2021-41031 CVE record

CVSS 7.8 High

A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their pri…
- Fortinet FortiClientWindows
Not analysed yet 18 Jul 2022
CVE-2022-26113 CVE record

CVSS 7.7 High

An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10 may allow a local attacker t…
- Fortinet FortiClientWindows
Not analysed yet 18 Jul 2022
CVE-2021-43066 CVE record

CVSS 8.4 High

Fortinet FortiClientWindows: A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and…
- Fortinet FortiClientWindows
Not analysed yet 11 May 2022
CVE-2021-44169 CVE record

CVSS 8.2 High

A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative…
- Fortinet FortiClientWindows
Not analysed yet 6 Apr 2022
CVE-2021-36167 CVE record

CVSS 4.3 Medium

An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control v…
- Fortinet FortiClientWindows
Not analysed yet 9 Dec 2021
CVE-2021-43204 CVE record

CVSS 4.4 Medium

Fortinet FortiClientWindows: A improper control of a resource through its lifetime in Fortinet FortiClientWindows…
- Fortinet FortiClientWindows
Not analysed yet 9 Dec 2021
CVE-2021-36183 CVE record

CVSS 7.4 High

An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTE…
- Fortinet FortiClientWindows
Not analysed yet 2 Nov 2021
CVE-2020-9290 CVE record

CVSS 7.1 High

Untrusted search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-426
Not analysed yet 15 Mar 2020
CVE-2019-17658 CVE record

An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executabl…
- Fortinet FortiClientWindows
Not analysed yet 12 Mar 2020
CVE-2018-9193 CVE record

CVSS 7.1 High

A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, whi…
- Fortinet FortiClientWindows
Not analysed yet 30 May 2019
CVE-2019-5589 CVE record

CVSS 8.6 High

Untrusted search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-426
Not analysed yet 28 May 2019