Skip to content
fr Sign in
7.1 High

CVE-2025-47761 An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows…

Description

An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection.

Affected products and versions

Product Affected versions Fixed in
FortiClientWindows 7.4 7.4.0 → 7.4.3 No fix stated
FortiClientWindows 7.2 7.2.0 → 7.2.9 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiClientWindows

The 30 CVEs of FortiClientWindows →
CVE-2026-84386 A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all… 4.7 Medium CVE-2026-70465 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows… 7.3 High CVE-2026-44278 A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,… 2.1 Low CVE-2025-62676 An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet… 6.4 Medium
Track this CVE