Fortinet FortiClientWindows
30 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-84386 | 7.4.0 – 7.4.7 ; 7.2.0 – 7.2.15 | A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attac | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-70465 | 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.11 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, F | HIGH 8.1 | 0.5 % | ||
| CVE-2026-44278 | 7.4.0 – 7.4.2 ; 7.2.0 – 7.2.14 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-62676 | 7.4.0 – 7.4.4 ; 7.2.0 – 7.2.12 ; 7.0.0 – 7.0.14 | An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 | HIGH 7.1 | 0.2 % | ||
| CVE-2025-54660 | 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.10 ; 7.0.0 – 7.0.14 | An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientW | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-46373 | 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.8 | A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7. | HIGH 7.8 | 0.2 % | ||
| CVE-2025-47761 | 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.9 | An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, | HIGH 7.8 | 0.2 % | ||
| CVE-2025-57716 | 7.4.0 – 7.4.3 ; 7.2.0 – 7.2.11 ; 7.0.0 – 7.0.14 | An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versio | HIGH 7.3 | 0.2 % | ||
| CVE-2024-54019 | 7.4.0 ; 7.2.0 – 7.2.6 ; 7.0.0 – 7.0.14 | A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-24473 | 7.2.0 – 7.2.1 ; 7.0.13 – 7.0.14 | A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2. | MEDIUM 4.8 | 0.6 % | ||
| CVE-2020-9295 | 6.2.0 – 6.2.6 ; 6.0.0 – 6.0.10 | FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running | HIGH 7.5 | 0.3 % | ||
| CVE-2024-40586 | 7.4.0 ; 7.2.0 – 7.2.6 ; 7.0.3 – 7.0.13 | An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below m | MEDIUM 6.7 | 0.2 % | ||
| CVE-2024-50564 | 7.4.0 ; 7.2.0 – 7.2.7 ; 7.0.0 – 7.0.14 ; … | A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all ve | LOW 3.3 | 0.2 % | ||
| CVE-2024-50570 | 7.4.0 ; 7.2.0 – 7.2.5 ; 7.0.0 – 7.0.13 | A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 t | MEDIUM 5.0 | 0.1 % | ||
| CVE-2024-47574 | 7.4.0 ; 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.12 ; … | A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versi | HIGH 7.8 | 0.5 % | ||
| CVE-2024-36507 | 7.4.0 ; 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.12 | A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an | HIGH 7.8 | 0.3 % | ||
| CVE-2024-36513 | 7.2.0 – 7.2.4 ; 7.0.0 – 7.0.12 ; 6.4.0 – 6.4.10 | A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 al | HIGH 8.8 | 0.2 % | ||
| CVE-2024-31489 | 7.2.0 – 7.2.2 ; 7.0.0 – 7.0.11 | AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLin | HIGH 8.1 | 0.4 % | ||
| CVE-2022-45856 | 7.0.0 – 7.0.7 ; 6.4.0 – 6.4.10 | An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 a | MEDIUM 5.9 | 0.2 % | ||
| CVE-2022-40681 | 7.0.0 – 7.0.7 ; 6.4.0 – 6.4.8 ; 6.2.0 – 6.2.9 ; … | A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacke | HIGH 7.1 | 0.2 % | ||
| CVE-2023-33304 | 7.2.0 – 7.2.1 ; 7.0.0 – 7.0.9 | A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass s | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-41840 | 7.2.0 – 7.2.1 ; 7.0.9 | A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious | HIGH 7.8 | 0.3 % | ||
| CVE-2023-37939 | 7.2.0 ; 7.0.0 – 7.0.9 ; 6.4.0 – 6.4.10 ; … | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6. | LOW 3.3 | 0.3 % | ||
| CVE-2022-33877 | 7.0.0 – 7.0.6 ; 6.4.0 – 6.4.8 | An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and Fo | MEDIUM 6.8 | 0.2 % | ||
| CVE-2022-43946 | 7.0.0 – 7.0.7 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.9 ; … | Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time | HIGH 8.1 | 0.7 % | ||
| CVE-2022-42470 | 7.0.0 – 7.0.7 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.9 ; … | A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 all | HIGH 7.8 | 0.3 % | ||
| CVE-2022-40682 | 7.0.0 – 7.0.7 ; 6.4.0 – 6.4.10 ; 6.2.0 – 6.2.9 ; … | A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacke | HIGH 7.8 | 0.2 % | ||
| CVE-2020-9290 | 6.2.3 | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable | HIGH 7.8 | 0.9 % | ||
| CVE-2018-9193 | 6.0.0 – 6.0.5 ; 5.6.6 | A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination o | HIGH 7.8 | 0.4 % | ||
| CVE-2019-5589 | 6.0.0 – 6.0.5 ; 5.6.0 – 5.6.6 ; 5.4.0 – 5.4.5 ; … | A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable | HIGH 8.8 | 1.0 % |