CVE-2025-5942

MEDIUM

Netskope NS Client < unknown - Buffer Overflow

Title source: llm
STIX 2.1

Description

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.

Scores

CVSS v4 5.7
EPSS 0.0003
EPSS Percentile 8.2%
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-122
Status published
Products (1)
Netskope/Netskope Client < 126.0.9, 129.0.0
Published Aug 14, 2025
Tracked Since Feb 18, 2026