Yüksek CVSS 8.1
CVE-2026-70465: Forticlient: arabellek taşması
Açıklama (NVD)
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.
Özet bilgiler
- Ürün
- Fortinet Forticlient
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,52 (yüzdelik 44)
- CWE
- CWE-120
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-forticlient | 7.2.0 | — | 7.2.12 |
| fortinet-forticlient | 7.4.0 | — | 7.4.4 |