CVE-2025-15641CWE-782

CVE-2025-15641

published June 17, 2026

CVSS
6.8
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all anti-tampering protections for the NSClient.Affected Product(s) and Version(s)

* Product Name: Netskope Client

* Affected Platform: Windows

* Affected Version: All version below R138

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-782 · Exposed IOCTL with Insufficient Access Control
Published
2026-06-17T17:19Z
References (1)
EPSS history
Timeline
  • 17 JUN 01:31Z
    Netskope Client Exposed IOCTL with Insufficient Access Controls
    cvelistv5