Known vulnerabilities in FortiClient (macOS)

Software CPE: cpe:2.3:a:fortinet:forticlient_macos:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiClient (macOS) FortiClient (macOS) is affected by 16 known vulnerabilities: 1 critical, 4 medium, 11 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117211 - Improper Verification of Cryptographic Signature
CVE-2025-46774
CWE-347 Low
No
No
7.2.10, 7.4.4 15.10.2025 SB2025101569
#VU117142 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-31365
CWE-94 Medium
No
No
7.2.9, 7.4.4 15.10.2025 SB2025101502
#VU117140 - Incorrect Permission Assignment for Critical Resource
CVE-2025-57741
CWE-732 Low
No
No
7.2.12, 7.4.4 14.10.2025 SB20251014111
#VU109044 - Improper isolation or compartmentalization
CVE-2024-35281
CWE-653 Low
No
No
7.2.9, 7.4.3 13.05.2025 SB2025051365
#VU109038 - Incorrect Authorization
CVE-2025-25251
CWE-863 Low
No
No
7.2.9, 7.4.3 13.05.2025 SB2025051358
#VU107313 - Improper Authentication
CVE-2024-52968
CWE-287 Low
No
No
7.0.13, 7.2.5, 7.4.1 09.04.2025 SB2025040978
#VU100451 - Improper Verification of Cryptographic Signature
CVE-2024-40592
CWE-347 Low
No
No
7.2.5, 7.4.1 14.11.2024 SB2024111403
#VU97117 - Improper Certificate Validation
CVE-2024-31489
CWE-295 Medium
No
No
7.0.12, 7.2.5 10.09.2024 SB20240910155
#VU97116 - Improper Certificate Validation
CVE-2022-45856
CWE-295 Medium
No
No
7.2.5 10.09.2024 SB20240910154
#VU91755 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-3661
CWE-300 Medium
No
No
- 11.06.2024 SB20240611271
SB2025011365
SB2025011657
and 7 more
#VU88258 - External Control of File Name or Path
CVE-2024-31492
CWE-73 Low
No
No
7.0.11, 7.2.4 09.04.2024 SB2024040962
#VU88257 - External Control of File Name or Path
CVE-2023-45588
CWE-73 Low
No
No
7.0.11, 7.2.4 09.04.2024 SB2024040962
#VU81942 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37939
CWE-200 Low
No
No
7.2.2 12.10.2023 SB2023101237
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
7.2.5 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU74987 - Download of Code Without Integrity Check
CVE-2023-22635
CWE-494 Low
No
No
7.0.8 11.04.2023 SB20230411104
#VU68921 - Cleartext Storage of Sensitive Information
CVE-2022-33878
CWE-312 Low
No
No
7.0.6 02.11.2022 SB2022110220