Fortinet FortiClientMac
15 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-46774 | 7.4.0 – 7.4.2 ; 7.2.0 – 7.2.9 ; 7.0.0 – 7.0.14 | An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version | HIGH 7.8 | 0.1 % | ||
| CVE-2025-31365 | 7.4.0 – 7.4.3 ; 7.2.1 – 7.2.8 | An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2 | HIGH 7.1 | 0.3 % | ||
| CVE-2025-57741 | 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.11 ; 7.0.0 – 7.0.14 | An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11 | HIGH 7.8 | 0.1 % | ||
| CVE-2025-25251 | 7.4.0 – 7.4.2 ; 7.2.0 – 7.2.8 ; 7.0.0 – 7.0.14 | An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may all | HIGH 7.8 | 0.2 % | ||
| CVE-2024-35281 | 7.4.0 – 7.4.2 ; 7.2.0 – 7.2.8 ; 7.0.0 – 7.0.14 | An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7. | HIGH 7.8 | 0.1 % | ||
| CVE-2023-45588 | 7.2.0 – 7.2.3 ; 7.0.6 – 7.0.10 | An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below install | HIGH 7.8 | 0.3 % | ||
| CVE-2024-52968 | 7.4.0 ; 7.2.3 – 7.2.4 ; 7.0.11 – 7.0.12 | An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty passwo | HIGH 8.4 | 0.2 % | ||
| CVE-2024-50570 | 7.4.0 – 7.4.2 ; 7.2.0 – 7.2.7 ; 7.0.0 – 7.0.14 | A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 t | MEDIUM 5.0 | 0.1 % | ||
| CVE-2024-40592 | 7.4.0 ; 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.10 ; … | An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, ver | MEDIUM 6.8 | 0.1 % | ||
| CVE-2024-31489 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.11 | AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLin | HIGH 8.1 | 0.4 % | ||
| CVE-2022-45856 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.13 ; 6.4.0 – 6.4.10 | An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 a | MEDIUM 5.9 | 0.2 % | ||
| CVE-2024-31492 | 7.2.0 – 7.2.3 ; 7.0.6 – 7.0.10 | An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below install | HIGH 7.8 | 0.3 % | ||
| CVE-2023-37939 | 7.2.0 – 7.2.1 ; 7.0.0 – 7.0.9 ; 6.4.0 – 6.4.10 ; … | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6. | LOW 3.3 | 0.3 % | ||
| CVE-2023-22635 | 7.0.0 – 7.0.7 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.9 ; … | A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all | HIGH 7.8 | 0.1 % | ||
| CVE-2019-5585 | 6.0.4 ; 6.0.3 ; 6.0.2 ; … | An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application's performance via mo | MEDIUM 6.1 | 0.4 % |