VULNERABILITY INTELLIGENCE

CVE-2025-11156

EPSS probability0.14%
CISA KEVNot currently listed
Published2025-11-28
Last modified2026-10-08

Description

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

Weakness classification

  • psirt@netskope.com: CWE-476

Primary references