CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

CVE-2025-11156

CVE-2025-11156 affects the Netskope NS Client on Windows. A local, authenticated user with Administrator privileges can improperly load the NS Client driver as a generic kernel service, triggering a system crash (Blue Screen of Death) and a Denial of Service on the affected machine. The descripti...

CVE-2025-11156 Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

CVE-2025-11156 Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

EUVD-2025-199877

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

PT-2025-48334

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

The vulnerability of the qtrr_endpoint_post() function in the net/qrtr/qrtr.c module allows a hacker to trigger a service failure in the Qualcomm IPC kernel of the Linux operating system.

The vulnerability of the qtrrendpointpost function in the net/qrtr/qrtr.c module is related to buffer out-of-bounds reading. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function mlxsw_sp_acl_tcam_vregion_rehash_work() in the drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the function mlxswspacltcamvregionrehashwork in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wakeup_kswapd() function in the vmscan component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the wakeupkswapd function in the vmscan component of the Linux operating system’s kernel is related to inconsistencies in memory management procedures. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the libradius kernel service in the FreeBSD operating system allows a hacker to cause a service failure.

The vulnerability of the libradius kernel service in the FreeBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2016-0859

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted RPC request...

CVE-2016-0859

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted RPC request...

Integer overflow

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted RPC request...

CVE-2016-0859

Summary: CVE-2016-0859 affects Advantech WebAccess before 8.1. The vulnerability is an integer overflow in the Kernel service that can be triggered by a crafted RPC request, leading to remote code execution or a denial of service (stack-based buffer overflow). Affected product/version: WebAccess ...

CVE-2004-1193

Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...