CVE 5.9 MEDIUM

Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver_CVE-2025-11156

5.9 / 10
MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H

Description

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

Basic Information

ID CVE-2025-11156
Source Netskope
Published Nov 28, 2025 at 14:26
Modified Nov 28, 2025 at 14:35

Affected Product

Vendor Netskope
Product Netskope Client
Affected Versions Netskope Netskope Client 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.