CVE-2026-70465: Escalation of privilege in Fortinet FortiClientWindows
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.
AI Analysis
Technical Summary
This vulnerability involves a classic buffer overflow caused by copying data without checking the input size in Fortinet FortiClientWindows versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.11. An attacker capable of altering or crafting DNS responses to the affected host can exploit this flaw to execute arbitrary code, resulting in escalation of privilege. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity. Fortinet has released an official fix to remediate this issue.
Potential Impact
Successful exploitation can lead to arbitrary code execution with elevated privileges on the affected system, compromising confidentiality, integrity, and availability. The attacker does not require authentication but must be able to manipulate DNS responses to the target.
Mitigation Recommendations
An official fix is available from Fortinet and should be applied promptly to affected versions. Users should update FortiClientWindows to a patched version beyond 7.4.3 or 7.2.11 as per the vendor's guidance.
CVE-2026-70465: Escalation of privilege in Fortinet FortiClientWindows
Description
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.
CVSS v3.1
Score 7.3high
Affected software
cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a classic buffer overflow caused by copying data without checking the input size in Fortinet FortiClientWindows versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.11. An attacker capable of altering or crafting DNS responses to the affected host can exploit this flaw to execute arbitrary code, resulting in escalation of privilege. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity. Fortinet has released an official fix to remediate this issue.
Potential Impact
Successful exploitation can lead to arbitrary code execution with elevated privileges on the affected system, compromising confidentiality, integrity, and availability. The attacker does not require authentication but must be able to manipulate DNS responses to the target.
Mitigation Recommendations
An official fix is available from Fortinet and should be applied promptly to affected versions. Users should update FortiClientWindows to a patched version beyond 7.4.3 or 7.2.11 as per the vendor's guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- fortinet
- Date Reserved
- 2026-08-04T15:01:40.657Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- official-fix
Threat ID: 6a7c6309bf8831d539826a42
Added to database: 08/12/2026, 12:11:53 UTC
Last enriched: 08/12/2026, 12:26:06 UTC
Last updated: 08/12/2026, 12:58:59 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.