Threats tagged 'ghsa-j48r-9cxh-ccpx'

CVE-2025-47761 is a high-severity vulnerability in Fortinet FortiClient for Windows versions 7.4.0 through 7.4.3 and 7.2.0 through 7.2.9. It involves an exposed IOCTL interface with insufficient access control in the fortips driver, which may allow an authenticated local user to execute unauthorized code. Exploitation requires bypassing Windows memory protections such as Heap integrity and HSP, and a valid, active VPN IPSec connection is necessary.