The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Forticlient_host_security | Fortinet | * | 3.0 (including) |