Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductForticlient (f1dedd21-b015-56f2-acb3-24cd61ec013c)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57741 vulnerable 2026-06-08 07:33:16.070078 Details available
HIGH (7)
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local attacker to run arbitrary code or commands via LaunchDaemon hijacking.
Published: 2025-10-14T15:22:49.758Z
Updated: 2026-02-26T17:47:36.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46774 vulnerable 2026-06-08 07:27:08.790275 Details available
MEDIUM (6.8)
An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may allow a local user to escalate their privileges via FortiClient related executables.
Published: 2025-10-14T15:23:47.725Z
Updated: 2026-02-26T17:47:32.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31365 vulnerable 2026-06-08 07:17:02.798334 Details available
MEDIUM (5.5)
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an unauthenticated attacker to execute arbitrary code on the victim's host via tricking the user into visiting a malicious website.
Published: 2025-10-14T15:23:43.265Z
Updated: 2026-02-26T17:47:32.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25251 vulnerable 2026-06-08 07:12:50.948754 Details available
HIGH (7.4)
An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileges via crafted XPC messages.
Published: 2025-05-28T07:53:42.390Z
Updated: 2026-02-26T18:27:52.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52968 vulnerable 2026-06-08 06:54:12.079610 Details available
MEDIUM (5.8)
An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.
Published: 2025-02-11T16:09:00.587Z
Updated: 2025-02-11T16:35:11.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40592 vulnerable 2026-06-08 06:43:52.706175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3661 vulnerable 2026-06-08 06:43:51.123890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35281 vulnerable 2026-06-08 06:37:35.820453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31492 vulnerable 2026-06-08 06:35:31.785070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31489 vulnerable 2026-06-08 06:35:31.778620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45588 vulnerable 2026-06-08 06:12:42.871687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37939 vulnerable 2026-06-08 06:08:16.471764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22635 vulnerable 2026-06-08 05:54:26.651982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33878 vulnerable 2026-06-08 05:44:51.286411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42754 vulnerable 2026-06-08 05:35:22.515703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41028 vulnerable 2026-06-08 05:35:19.510431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26089 vulnerable 2026-06-08 05:30:41.924926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17650 vulnerable 2026-06-08 05:13:10.912460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15704 vulnerable 2026-06-08 05:12:57.831440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9195 vulnerable 2026-06-08 05:12:07.933126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17543 vulnerable 2026-06-08 05:09:09.567704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14184 vulnerable 2026-06-08 05:08:49.469096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.