CVE-2026-84386
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7 and 7.2 all versions may allow attacker to improper access control via an exposed minifilter communication port.
Risk Assessment
An attacker may gain unauthorized access to the system or data, potentially leading to security breaches.
Recommendation
Update FortiClientWindows to the latest available version that includes the fix and restrict access to the minifilter communication port.
Other vulnerabilities in FortiClientWindows
See all- CVE-2025-47761High
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] in Fortinet FortiClientWindows 7.4.0 through 7.4.3 and 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via the fortips driver. A successful attack requires bypassing Windows memory protections such as Heap integrity and HSP, and an active VPN IPSec connection.
- CVE-2025-46373High
A Heap-based Buffer Overflow vulnerability [CWE-122] in Fortinet FortiClientWindows 7.4.0 through 7.4.3 and 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via "fortips_74.sys". The attacker would need to bypass the Windows heap integrity protections.
Original NVD description (English source)
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS