Class familyFortinet · FortiOS
Fortinet FortiOS out-of-bounds write flaws, 2023–2026
5 FortiOS CVEs with CWE-787 weaknesses, 2 Jan 2023 to 12 May 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2023’23
1 2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20233 CVEs, 1 in KEV
20241 CVE, 1 in KEV
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-42475KEV | 2 Jan 2023 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 88.8 |
| CVE-2023-22640 | 3 May 2023 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS… | Grouped by weakness | 16.8 |
| CVE-2023-22639 | 13 Jun 2023 | A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS… | Grouped by weakness | 6.1 |
| CVE-2024-21762KEV | 9 Feb 2024 | Fortinet FortiOS Out-of-Bound Write Vulnerability | Grouped by weakness | 79.8 |
| CVE-2025-53844 | 12 May 2026 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS… | Grouped by weakness | 15.2 |