Home

Description

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

PUBLISHED Reserved 2025-09-29 | Published 2025-11-28 | Updated 2025-11-28 | Assigner Netskope




MEDIUM: 5.9CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H

Problem types

CWE-476 NULL Pointer Dereference

Product status

Default status
unaffected

Any version before R132
affected

Credits

Ahmad Abdillah bin Zaini finder

References

www.netskope.com/...tskope-security-advisory-nskpsa-2025-005

cve.org (CVE-2025-11156)

nvd.nist.gov (CVE-2025-11156)

Download JSON