CVE-2024-36513

A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.

Scoring

Severity

HIGH

CVSS base score

7.4

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:T/RC:C

EPSS probability

0.22%

CWE

CWE-270

Published

2024-11-12

Last modified

2026-03-13

Affected products

• Fortinet FortiClientWindows
• Fortinet FortiClientWindows
• Fortinet FortiClientWindows

Weakness type

• CWE-270

Related vulnerabilities

• CVE-2026-9560 — Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows...
• CVE-2026-34853 — Permission bypass vulnerability in the LBS module....
• CVE-2025-55210 — FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
• CVE-2025-60721 — Windows Administrator Protection Elevation of Privilege Vulnerability
• CVE-2025-9408 — Userspace privilege escalation vulnerability on Cortex M
• CVE-2025-26499 — Under heavy system utilization a random race condition can occur during authentication or token...
• CVE-2025-46406 — A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged...
• CVE-2025-49583 — XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right

Markdown version · Browse all CVEs