EUVD-2026-72921

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

PT-2022-3516

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 7.0.2 and prior FortiClient for Windows versions 6.4.6 and prior FortiClient for Windows versions 6.2.9 and below Description A relative path traversal issue in the FortiESNAC service may allow a local...

PT-2021-21165

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 7.0.1 and below FortiClient for Windows versions 6.4.2 and below Description An improper authorization issue may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe...

CVE-2019-16150: Use of Hard-coded Credentials

Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local storage or the configuration backup file to decrypt the sensitive data via knowledge of the hard-cod...

PT-2020-5573

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions prior to 6.4.0 Description The issue is related to the use of a hard-coded cryptographic key in FortiClient for Windows, which may allow an attacker with access to local storage or configuration backup files to...

PT-2020-5574

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.2.1 and below Description The issue is related to the insecure use of temporary files in FortiClient for Windows. Exploitation of this issue may allow an attacker to gain elevated privileges, potentially...

CVE-2020-9290: Uncontrolled Search Path Element

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable...

PT-2019-3148

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient for Windows versions 6.2.0 and below Description The issue is related to a malicious DLL preload vulnerability and insufficient access control in the FortiClientOnlineInstaller.exe executable. This allows a privileged...

CVE-2018-9191: Undefined Security Weakness

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

PT-2019-11153

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient for Windows versions 6.0.4 and earlier Description: A local privilege escalation issue allows attackers to execute unauthorized code or commands via the named pipe responsible for FortiClient updates. Recommendations: For...

PT-2019-11154

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient for Windows versions 6.0.4 and earlier Description: A local privilege escalation issue allows an attacker to execute unauthorized code or commands via the parsing of a file. Recommendations: For Fortinet FortiClient for...

PT-2019-8966

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient for Windows versions 6.0.4 and earlier Description A local privilege escalation issue allows an attacker to execute unauthorized code or commands via command injection. Recommendations For Fortinet FortiClient for Windows...

CVE-2018-13368: Undefined Security Weakness

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command injection...

PT-2019-5736

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.2.3 and below Description The issue is related to an Unsafe Search Path vulnerability, which may allow a local attacker to execute arbitrary code on the system. This can be achieved by uploading malicious...

PT-2019-6276

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.0.2 and earlier Description The issue is related to a null pointer dereference vulnerability in the NDIS miniport driver of Fortinet FortiClient for Windows. This vulnerability can be exploited to cause a...

CVE-2017-17543: Inadequate Encryption Strength

Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak...

PT-2017-13293

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 5.6.0 and below FortiClient for Mac OSX versions 5.6.0 and below FortiClient SSLVPN Client for Linux versions 4.4.2334 and below Description An Information Disclosure issue allows regular users to see each...

CVE-2017-14184: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to...