Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-11156 EUVD-2025-199877GHSA-3r5x-p9rp-jrmv

Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver

Published Nov 28, 2025 · Updated Nov 28, 2025 · Assigned by Netskope

Description

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

Affected products

VendorProductAffectedFixed
Netskope Netskope Client < R132 R132

References