CVE-2024-36513

8.8 highEPSS 0.2%

High (8.8) in fortinet forticlient. EPSS 0.2% chance of exploitation in the next 30 days.

A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-270
Published: 2024-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-144

Check your stack JSON