Forticlientwindows
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*
part: a version: 7.4.2 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Forticlientwindows (578fa840-5b2d-5798-8efe-4fc80a1e8def) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44278 |
vulnerable | 2026-06-08 08:03:18.199091 |
Details available
LOW (2.1)
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>
Published: 2026-05-12T16:54:09.226Z
Updated: 2026-05-14T15:28:56.927Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62676 |
vulnerable | 2026-06-08 07:39:16.410852 |
Details available
MEDIUM (6.4)
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages.
Published: 2026-02-10T15:39:12.816Z
Updated: 2026-02-26T15:04:10.922Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57716 |
vulnerable | 2026-06-08 07:33:16.008651 |
Details available
MEDIUM (6)
An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder.
Published: 2025-10-14T15:23:10.215Z
Updated: 2026-02-26T17:47:32.957Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54660 |
vulnerable | 2026-06-08 07:33:13.018122 |
Details available
MEDIUM (4.9)
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
Published: 2025-11-18T17:01:18.577Z
Updated: 2026-01-14T09:19:45.280Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47761 |
vulnerable | 2026-06-08 07:27:14.802168 |
Details available
HIGH (7.1)
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection.
Published: 2025-11-18T17:01:11.767Z
Updated: 2026-01-14T09:17:43.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46373 |
vulnerable | 2026-06-08 07:27:08.126544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.