CVE-2015-4077

The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...

2.1 LowPublic exploit

The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call.

Exploit likelihood

1.01%Down 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2015-4077
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-4077
Updated: 2026-11-02

EUVDEUVD-2015-4103 No score

Record: EUVD-2015-4103
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8fjh-3j4g-4f5v No score

The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...

Record: GHSA-8fjh-3j4g-4f5v
Weakness: CWE-200
Updated: 2026-11-02

Affected products

fortinet forticlient

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation	2018-08-05
PoC in GitHub	ApexPredator-InfoSec/forti_shield	2025-10-29

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-4077 is a low vulnerability (CVSS 2.1) in Fortinet Forticlient, published September 3, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.01%, the 63rd percentile. No source names a fixed version.