Netskope

Latest CVEs · RSS

• CVE-2026-15710 2026-09-11 · CVSS 6.8
  An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal commu
• CVE-2026-16174 2026-09-10 · CVSS 8.7
  Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially al
• CVE-2026-16172 2026-09-10 · CVSS 6.0
  Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially s
• CVE-2025-15642 2026-06-17 · CVSS 6.8
  Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the
• CVE-2025-15641 2026-06-17 · CVSS 6.8
  Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially
• CVE-2026-2810 2026-04-29 · CVSS 6.8
  Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potent
• CVE-2026-2809 2026-03-17 · CVSS 6.7
  Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potent
• CVE-2025-15584 2026-03-17 · CVSS 6.8
  Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potent
• CVE-2025-11156 2025-11-28 · CVSS 5.9
  Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user wit
• CVE-2025-5942 2025-08-14 · CVSS 5.7
  Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigge
• CVE-2025-0309 2025-08-14 · CVSS 6.0
  An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validat
• CVE-2025-5941 2025-08-14 · CVSS 2.0
  Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a
• CVE-2024-7402 2025-08-14 · CVSS 7.0
  Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by
• CVE-2024-13177 2025-04-15 · CVSS 5.2
  Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A sta
• CVE-2024-11616 2024-12-19 · CVSS 5.6
  Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vul
• CVE-2024-7401 2024-08-26 · CVSS 8.5
  Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Si
• CVE-2023-4996 2023-11-06 · CVSS 6.6
  Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope cl
• CVE-2022-4149 2023-06-15 · CVSS 7.0
  The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory (C:\Users\Public\netSkope) for
• CVE-2023-2270 2023-06-15 · CVSS 7.0
  The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The con
• CVE-2021-44862 2022-11-03 · CVSS 8.4
  Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be res