CVE Vulnerabilities

CVE-2025-11156

NULL Pointer Dereference

Published: Nov 28, 2025 | Modified: Nov 28, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash (Blue-Screen-of-Death) and resulting in a Denial of Service (DoS) for the affected machine.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Potential Mitigations

References