CVE-2025-25251 — Fortinet / FortiClientMac

CVE-2025-25251

Fortinet / FortiClientMac PUBLISHED

Description (CNA)

An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileges via crafted XPC messages.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiClientMac	affected 7.4.0 through 7.4.2; affected 7.2.0 through 7.2.8; affected 7.0.0 through 7.0.14

CWE

CWE-863

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-016

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.