Skip to content

Vulnerabilities of Fortinet FortiClientWindows

Is your version affected?

CVE Summary Score Published
CVE-2026-84386 A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all… 4.7 Medium Sep 8, 2026
CVE-2026-70465 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows… 7.3 High Aug 12, 2026
CVE-2026-44278 A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,… 2.1 Low May 12, 2026
CVE-2025-62676 An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet… 6.4 Medium Feb 10, 2026
CVE-2025-54660 An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0… 4.9 Medium Nov 18, 2025
CVE-2025-46373 A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,… 7.1 High Nov 18, 2025
CVE-2025-47761 An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows… 7.1 High Nov 18, 2025
CVE-2025-57716 An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through… 6.0 Medium Oct 14, 2025
CVE-2024-54019 A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0… 4.4 Medium Jun 10, 2025
CVE-2025-24473 A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet… 4.8 Medium May 28, 2025
CVE-2020-9295 FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and… 4.7 Medium Mar 17, 2025
CVE-2024-40586 An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below,… 6.3 Medium Feb 11, 2025
CVE-2024-50564 A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all… 3.2 Low Jan 14, 2025
CVE-2024-50570 A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0… 4.9 Medium Dec 18, 2024
CVE-2024-47574 A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions… 7.4 High Nov 13, 2024
CVE-2024-36507 A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12… 6.7 Medium Nov 12, 2024
CVE-2024-36513 A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version… 7.4 High Nov 12, 2024
CVE-2024-31489 AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through… 6.4 Medium Sep 10, 2024
CVE-2022-45856 An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through… 4.6 Medium Sep 10, 2024
CVE-2022-40681 A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 -… 7.1 High Nov 14, 2023
CVE-2023-33304 A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows… 4.4 Medium Nov 14, 2023
CVE-2023-41840 A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack… 7.4 High Nov 14, 2023
CVE-2023-37939 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows… 3.0 Low Oct 10, 2023
CVE-2022-33877 An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and… 6.8 Medium Jun 13, 2023
CVE-2022-43946 Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability… 7.3 High Apr 11, 2023

Other Fortinet products