← Database

CVE-2021-36183

HIGH CVSS: 7.4 Published: 2021-11-02 Modified: 2026-06-17

Description

An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates.

Affected Platforms

Fortinet Forticlient

Weakness Type

NVD-CWE-Other

References