Medium severity · published Aug 14, 2025
CVE-2025-5942
Heap Overflow in Netskope Endpoint DLP Driver
5.7
CVSS
0.1%
EPSS
No
On KEV
Description
Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Netskope Client · Netskope
before 126.0.9, 129.0.0 · source: vendor
Affected product
NC
Netskope Client
Netskope
More from Netskope Client
7.0
CVE-2024-7402
Netskope Client Configuration Tampering with Local MITM
6.8
CVE-2025-15642
Netskope Client Service Insufficient Access Controls
6.8
CVE-2025-15641
Netskope Client Exposed IOCTL with Insufficient Access Controls
6.0
CVE-2025-0309
Netskope Client Local Elevation of Privileges
5.9
CVE-2025-11156
Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver