https://vulnogram.org/ Most recent CVEs assigned by Netskope (netskope). https://vulnogram.org/seaview/icons/netskope.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-12254 https://vulnogram.org/CVE-2026-12254 Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not… Medium Network Exploitable Mon, 19 Oct 2026 15:37:11 GMT https://vulnogram.org/CVE-2026-15710 https://vulnogram.org/CVE-2026-15710 An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel drive… Medium Fri, 11 Sep 2026 13:57:02 GMT https://vulnogram.org/CVE-2026-16174 https://vulnogram.org/CVE-2026-16174 Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an in… High Thu, 10 Sep 2026 22:51:27 GMT https://vulnogram.org/CVE-2026-16172 https://vulnogram.org/CVE-2026-16172 Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely… Medium Thu, 10 Sep 2026 22:45:28 GMT https://vulnogram.org/CVE-2025-15642 https://vulnogram.org/CVE-2025-15642 Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the… Medium Wed, 17 Jun 2026 01:48:39 GMT https://vulnogram.org/CVE-2025-15641 https://vulnogram.org/CVE-2025-15641 Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successf… Medium Wed, 17 Jun 2026 01:31:51 GMT https://vulnogram.org/CVE-2026-2810 https://vulnogram.org/CVE-2026-2810 Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading… Medium Wed, 29 Apr 2026 15:23:11 GMT https://vulnogram.org/CVE-2026-2809 https://vulnogram.org/CVE-2026-2809 Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, lead… Medium Tue, 17 Mar 2026 20:20:18 GMT https://vulnogram.org/CVE-2025-15584 https://vulnogram.org/CVE-2025-15584 Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an integer overflow within the filter communic… Medium Tue, 17 Mar 2026 18:55:59 GMT https://vulnogram.org/CVE-2025-11156 https://vulnogram.org/CVE-2025-11156 Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This… Medium Fri, 28 Nov 2025 14:26:08 GMT https://vulnogram.org/CVE-2025-5942 https://vulnogram.org/CVE-2025-5942 Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Suc… Medium Thu, 14 Aug 2025 04:36:05 GMT https://vulnogram.org/CVE-2025-0309 https://vulnogram.org/CVE-2025-0309 An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certif… Medium Thu, 14 Aug 2025 04:35:15 GMT https://vulnogram.org/CVE-2025-5941 https://vulnogram.org/CVE-2025-5941 Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the machine, b… Low Thu, 14 Aug 2025 04:34:43 GMT https://vulnogram.org/CVE-2024-7402 https://vulnogram.org/CVE-2024-7402 Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel.… High Thu, 14 Aug 2025 04:32:41 GMT https://vulnogram.org/CVE-2024-13177 https://vulnogram.org/CVE-2024-13177 Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A standard user could potentially create a symlink of the file “nsinstallation” to escalate the… Medium Tue, 15 Apr 2025 15:21:21 GMT https://vulnogram.org/CVE-2024-11616 https://vulnogram.org/CVE-2024-11616 Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vulnerability arises from the fact that the NumberOfBytes argument to ExAllocatePoolWithTag,… Medium Thu, 19 Dec 2024 09:46:26 GMT https://vulnogram.org/CVE-2024-7401 https://vulnogram.org/CVE-2024-7401 Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A malicious actor can… High Mon, 26 Aug 2024 16:36:40 GMT https://vulnogram.org/CVE-2023-4996 https://vulnogram.org/CVE-2023-4996 Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope client by using a specially-crafted package. The root cause of the problem was a user contro… Medium Mon, 06 Nov 2023 10:16:06 GMT https://vulnogram.org/CVE-2022-4149 https://vulnogram.org/CVE-2022-4149 The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory (C:\Users\Public\netSkope) for a standard user. The files are created and written with a SYSTEM account except one file (… High Thu, 15 Jun 2023 06:44:25 GMT https://vulnogram.org/CVE-2023-2270 https://vulnogram.org/CVE-2023-2270 The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The connection handling function of Netskope client before R100 in this service utilized a relati… High Thu, 15 Jun 2023 04:29:55 GMT https://vulnogram.org/CVE-2021-44862 https://vulnogram.org/CVE-2021-44862 Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be restricted. The vulnerability exists because the sensitive information is not masked/scrubbed… High Thu, 03 Nov 2022 19:20:41 GMT