CVE-2015-5736

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute...

7.2 HighPublic exploit

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call.

Exploit likelihood

2.13%Down 5.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2015-5736
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-5736
Updated: 2026-11-02

EUVDEUVD-2015-5682 No score

Record: EUVD-2015-5682
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v2jx-hxfp-h5qq No score

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute...

Record: GHSA-v2jx-hxfp-h5qq
Updated: 2026-11-02

Affected products

fortinet forticlient

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Fortinet FortiClient 5.2.3 (Windows 10 x64 Pre-Anniversary) - Local Privilege Escalation	2017-03-25
Exploit-DB	Fortinet FortiClient 5.2.3 (Windows 10 x64 Post-Anniversary) - Local Privilege Escalation	2017-03-25
Exploit-DB	Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation	2018-08-05
PoC in GitHub	RainbowDynamix/FortiLOL	2026-09-09
PoC in GitHub	avielzecharia/CVE-2015-5736	2025-09-06

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5736 is a high vulnerability (CVSS 7.2) in Fortinet Forticlient, published September 3, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile. No source names a fixed version.

References

Show 5 moreShow less