CVE-2025-11156 – Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver

CVE ID : CVE-2025-11156

Published : Nov. 28, 2025, 3:15 p.m. | 1 hour, 8 minutes ago

Description : Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…