CVE-2025-11156CWE-476

CVE-2025-11156

published November 28, 2025

CVSS
5.9
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

The record
Technical detail
CVSS
5.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00126 · 2.1th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-11-28T20:15Z
References (1)
EPSS history
Timeline
  • 28 NOV 14:26Z
    Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver
    cvelistv5