CVE-2025-11156: NULL Pointer Dereference

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

PT-2025-33119 · Netskope · Netskope Client +1

Name of the Vulnerable Software and Affected Versions: Netskope NS Client on Windows systems affected versions not specified Description: Netskope was notified about a potential gap in its agent NS Client on Windows systems. Successful exploitation of this issue by an unprivileged user can trigge...

CVE-2025-5941: Out-of-bounds Read

Netskope is notified about a potential gap in its agent NS Client in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the machine, based on the exact configuration. A successful...

CVE-2025-5942: Heap-based Buffer Overflow

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death BSOD. Successful exploitation can also potentially be...