FO
Product
Forticlient
86
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 52Medium 21Low 3
Watch
Add Forticlient to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17658 | 9.8 | Mar 12 | An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the… Affected: 6.0.0 through 6.0.9; 6.2.0 through 6.2.2 |
| CVE-2024-36513 | 8.8 | Nov 12 | A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated… Affected: 6.4.0 through 6.4.10; 7.0.0 before 7.0.13; 7.2.0 before 7.2.5 |
| CVE-2023-45590 | 8.8 | Apr 9 | An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute… Affected: 7.0.6 before 7.0.11; 7.0.3; 7.0.4; 7.2.0 |
| CVE-2021-44169 | 8.8 | Apr 6 | A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to… Affected: 6.0.0 through 6.0.10; 6.2.0 through 6.2.9; 6.4.0 through 6.4.7; 7.0.0 through 7.0.2 |
| CVE-2019-5589 | 8.8 | May 28 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable Affected: before 6.0.6 |
| CVE-2017-14184 | 8.8 | Dec 15 | An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN… Affected: before 5.6.0; before 5.6.0 |
| CVE-2016-8493 | 8.8 | Jun 26 | In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability Affected: 5.4.1; 5.4.2 |
| CVE-2024-52968 | 8.4 | Feb 11 | An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password Affected: 7.0.11 before 7.0.13; 7.2.3 before 7.2.5; 7.4.0 |
| CVE-2026-70465 | 8.1 | Aug 12 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11… Affected: 7.2.0 before 7.2.12; 7.4.0 before 7.4.4 |
| CVE-2024-31489 | 8.1 | Sep 10 | AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and… Affected: 7.0.0 before 7.0.12; 7.0.0 before 7.0.12; 7.0.0 before 7.0.12; 7.2.0 before 7.2.3; 7.2.0 before 7.2.5; 7.2.0 |
| CVE-2022-43946 | 8.1 | Apr 11 | Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition… Affected: 6.0.0 before 7.0.8 |
| CVE-2017-7344 | 8.1 | Dec 14 | A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog… Affected: through 5.4.3; 5.6.0 |
| CVE-2021-22127 | 8.0 | Apr 6 | An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute… Affected: before 6.2.9; 6.4.0 before 6.4.3 |
| CVE-2026-24018 | 7.8 | Mar 10 | A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged… Affected: 7.2.2 before 7.2.13; 7.4.0 before 7.4.5 |
| CVE-2025-46373 | 7.8 | Nov 18 | A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an… Affected: 7.2.0 before 7.2.9; 7.4.0 before 7.4.4 |
| CVE-2025-47761 | 7.8 | Nov 18 | An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9… Affected: 7.2.0 before 7.2.10; 7.4.0 before 7.4.4 |
| CVE-2025-46774 | 7.8 | Oct 14 | An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may… Affected: 7.0.0 before 7.2.10; 7.4.0 before 7.4.4 |
| CVE-2025-57741 | 7.8 | Oct 14 | An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local… Affected: 7.0.0 before 7.2.12; 7.4.0 before 7.4.4 |
| CVE-2025-25251 | 7.8 | May 28 | An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate… Affected: 7.0.0 before 7.2.9; 7.4.0 before 7.4.3 |
| CVE-2024-35281 | 7.8 | May 13 | An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop… Affected: 7.0.0 before 7.2.9; 7.4.0 before 7.4.3 |
| CVE-2023-45588 | 7.8 | Mar 14 | An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to… Affected: 7.0.6 before 7.0.11; 7.2.0 before 7.2.4 |
| CVE-2020-15934 | 7.8 | Dec 19 | An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0 Affected: 6.0.0 before 6.2.8; 6.4.0 |
| CVE-2024-47574 | 7.8 | Nov 13 | A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10… Affected: 6.4.0 before 7.0.13; 7.2.0 before 7.2.5; 7.4.0 |
| CVE-2024-36507 | 7.8 | Nov 12 | A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL… Affected: 7.0.0 before 7.0.13; 7.2.0 before 7.2.5; 7.4.0 |
| CVE-2024-31492 | 7.8 | Apr 10 | An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to… Affected: 7.0.6 before 7.0.11; 7.2.0 before 7.2.4 |
| CVE-2023-41840 | 7.8 | Nov 14 | A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search… Affected: 7.0.9; 7.2.0; 7.2.1 |
| CVE-2023-22635 | 7.8 | Apr 11 | A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all… Affected: 4.0.0 through 5.6.6; 6.0.0 through 6.4.10; 7.0.0 before 7.0.8 |
| CVE-2022-42470 | 7.8 | Apr 11 | A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized… Affected: 6.0.0 through 6.0.10; 6.2.0 through 6.2.9; 6.4.0 through 6.4.9; 7.0.0 before 7.0.8 |
| CVE-2022-40682 | 7.8 | Apr 11 | A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized code or… Affected: 6.0.0 through 6.0.10; 6.2.0 through 6.2.9; 6.4.0 through 6.4.9; 7.0.0 before 7.0.8 |
| CVE-2021-41031 | 7.8 | Jul 18 | A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker… Affected: 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0 through 7.0.2 |
| CVE-2021-43066 | 7.8 | May 11 | A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows… Affected: 6.0.0 before 6.4.7; 7.0.0 before 7.0.3 |
| CVE-2021-32592 | 7.8 | Dec 1 | An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to… Affected: 6.0.0 through 6.0.9; 6.2.0 through 6.2.9; 6.4.0 before 6.4.7; 7.0.0 |
| CVE-2021-36183 | 7.8 | Nov 2 | An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their… Affected: 6.4.0 through 6.4.2; 7.0.0 through 7.0.1 |
| CVE-2021-26089 | 7.8 | Jul 12 | An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase Affected: through 6.4.3 |
| CVE-2020-9291 | 7.8 | Jun 1 | An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file… Affected: through 6.0.9; 6.2.0 through 6.2.1 |
| CVE-2020-9290 | 7.8 | Mar 15 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable Affected: through 6.2.3 |
| CVE-2019-15711 | 7.8 | Feb 6 | A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting… Affected: through 6.2.1 |
| CVE-2019-17650 | 7.8 | Nov 21 | An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which… Affected: through 6.2.1 |
| CVE-2019-6692 | 7.8 | Oct 24 | A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL Affected: through 6.2.0 |
| CVE-2018-9193 | 7.8 | May 30 | A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into… Affected: through 6.0.4 |
| CVE-2018-9191 | 7.8 | May 30 | A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for… Affected: through 6.0.4 |
| CVE-2018-13368 | 7.8 | May 30 | A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command injection Affected: through 6.0.4 |
| CVE-2015-7362 | 7.8 | Jan 8 | Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via… Affected: All versions, or not specified |
| CVE-2024-3661 | 7.6 | May 6 | DHCP can add routes to a client’s routing table via the classless static route option (121) Affected: 6.4.0 before 7.2.5; 6.4.0 before 7.2.5; 6.4.0 before 7.2.5; 7.4.0; 7.4.0; 7.4.0 |
| CVE-2021-44167 | 7.5 | May 11 | An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and… Affected: 6.0.0 through 6.0.8; 6.2.0 through 6.2.9; 6.4.0 through 6.4.7; 7.0.0 through 7.0.2 |
| CVE-2021-41028 | 7.5 | Dec 16 | A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation… Affected: 6.0.0 through 6.0.9; 6.0.0 through 6.0.9; 6.2.0 through 6.2.9; 6.2.0 through 6.2.9; 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; +8 more |
| CVE-2017-17543 | 7.5 | Apr 26 | Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and… Affected: through 5.6.0; through 5.6.0 |
| CVE-2025-57716 | 7.3 | Oct 14 | An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged… Affected: 7.0.0 before 7.2.12; 7.4.0 before 7.4.4 |
| CVE-2025-62676 | 7.1 | Feb 10 | An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0… Affected: 7.0.0 before 7.2.13; 7.4.0 before 7.4.5 |
| CVE-2025-31365 | 7.1 | Oct 14 | An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an unauthenticated… Affected: 7.2.1 before 7.2.9; 7.4.0 before 7.4.4 |