CVE-2024-36507

Summary

CVE-2024-36507 is a newly disclosed vulnerability affecting Fortinet FortiClientWindows versions 7.4.0, 7.2.4 through 7.2.0, and 7.0.12 through 7.0.0. This issue arises due to an untrusted search path, enabling an attacker to execute arbitrary code by means of DLL hijacking and social engineering techniques. By exploiting this weakness, an adversary can gain unauthorized access to a targeted system, potentially leading to significant data breaches or system damage. Fortinet urges users to install the available patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.