CVE-2024-35281

7.8 highEPSS 0.1%

High (7.8) in fortinet. EPSS 0.1% chance of exploitation in the next 30 days.

An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-653
Published: 2025-05-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient
fortinet:fortifone_softclient

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-025

Check your stack JSON