CVEs 2022-42475 and 2022-27518: Critical Severity Vulnerabilities Under Active Exploitation On December 12, 2022, Fortinet disclosed a critical, heap-based buffer overflow vulnerability in the SSL VPN daemon on Fortinet devices. The next day, Citrix announced a...