CVE-2025-11156
Medium
Description
Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.
SeverityMedium
CVSS5.9
Exploit probability—
ProductNetskope Client
PublishedNov 28, 2025
First seenNov 28, 2025
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- Netskope Netskope ClientR132 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Netskope Netskope Client | v < R132 | R132 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.