Low severity · published Aug 14, 2025
CVE-2025-5941
Out-of-Bounds Read Vulnerability in Netskope Client
2.0
CVSS
0.1%
EPSS
No
On KEV
Description
Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the machine, based on the exact configuration. A successful exploit can potentially result in user-controllable memory being leaked in a domain name stored on the local machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Netskope Client · Netskope
through 128.0.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5941
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5941
www.netskope.com
https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2025-001
More from Netskope Client
7.0
CVE-2024-7402
Netskope Client Configuration Tampering with Local MITM
6.8
CVE-2025-15642
Netskope Client Service Insufficient Access Controls
6.8
CVE-2025-15641
Netskope Client Exposed IOCTL with Insufficient Access Controls
6.0
CVE-2025-0309
Netskope Client Local Elevation of Privileges
5.9
CVE-2025-11156
Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver
