CVE-2025-57716: Uncontrolled Search Path Element

An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...

The vulnerability of the executable file FortiClientOnlineInstaller.exe of the Fortinet FortiClient for Windows security device allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiClientOnlineInstaller.exe executable component of the Fortinet FortiClient for Windows security device is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially created DLL file...

CVE-2019-5589

An Unsafe Search Path vulnerability in FortiClient Online Installer Windows version before 6.0.6 may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files...

PT-2019-17767

Name of the Vulnerable Software and Affected Versions FortiClient Online Installer versions prior to 6.0.6 Description The issue allows an unauthenticated, remote attacker with control over the directory where FortiClientOnlineInstaller.exe is located to execute arbitrary code on the system. This...

CVE-2019-5589: Untrusted Search Path

An Unsafe Search Path vulnerability in FortiClient Online Installer Windows version before 6.0.6 may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files...