Netskope Client and Endpoint DLP
CVE-2025-5941: Out-of-Bounds Read Vulnerability in Netskope Client
Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Netskope Client (Windows) 0 to 128.0.0 | Upgrade past 128.0.0; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the machine, based on the exact configuration. A successful exploit can potentially result in user-controllable memory being leaked in a domain name stored on the local machine.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.