7.4
High
CVE-2024-36513 A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version…
Description
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientWindows 7.2 | 7.2.0 → 7.2.4 | No fix stated |
| FortiClientWindows 7.0 | 7.0.0 → 7.0.12 | No fix stated |
| FortiClientWindows 6.4 | 6.4.0 → 6.4.10 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiClientWindows
The 30 CVEs of FortiClientWindows →
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all…
4.7
Medium
CVE-2026-70465
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows…
7.3
High
CVE-2026-44278
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,…
2.1
Low
CVE-2025-62676
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet…
6.4
Medium