Medium severity · published Aug 14, 2025
CVE-2025-5942
Heap Overflow in Netskope Endpoint DLP Driver
5.7
CVSS
0.1%
EPSS
No
On KEV
Description
Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Netskope Client · Netskope
before 126.0.9, 129.0.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5942
www.netskope.com
https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2025-003
More from Netskope Client
7.0
CVE-2024-7402
Netskope Client Configuration Tampering with Local MITM
6.8
CVE-2025-15642
Netskope Client Service Insufficient Access Controls
6.8
CVE-2025-15641
Netskope Client Exposed IOCTL with Insufficient Access Controls
6.0
CVE-2025-0309
Netskope Client Local Elevation of Privileges
5.9
CVE-2025-11156
Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver
