2.3
Low
CVE-2024-35281 An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version…
Description
An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientMac 7.4 | 7.4.0 → 7.4.2 | No fix stated |
| FortiClientMac 7.2 | 7.2.0 → 7.2.8 | No fix stated |
| FortiClientMac 7.0 | 7.0.0 → 7.0.14 | No fix stated |
| FortiVoiceUCDesktop 3.0 | 3.0.0 → 3.0.16 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiClientMac
The 15 CVEs of FortiClientMac →
CVE-2025-46774
An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2…
6.8
Medium
CVE-2025-31365
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through…
5.5
Medium
CVE-2025-57741
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through…
7.0
High
CVE-2025-25251
An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0…
7.4
High