Netskope

18 CVEs across 5 Netskope products. Browse Netskope vulnerabilities, severities, and proof-of-concept exploits.

Netskope products with known CVEs

ProductCVEs
Netskope Client14
Netskope10
Endpoint Dlp Module For Netskope Client2
Client1
Nsclient1
Netskope CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-156422026-06-17Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing th…
CVE-2025-156412026-06-17Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially…
CVE-2026-28102026-04-29Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can poten…
CVE-2026-28092026-03-17Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can poten…
CVE-2025-155842026-03-17Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can poten…
CVE-2025-111562025-11-28Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user wi…
CVE-2025-59422025-08-14Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigg…
CVE-2025-59412025-08-14Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a…
CVE-2025-03092025-08-14An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient valida…
CVE-2024-74022025-08-14Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by…
CVE-2024-131772025-04-15Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A st…
CVE-2024-7401High7.52024-08-26Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. S…
CVE-2023-4996Medium6.62023-11-06Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope c…
CVE-2022-4149High7.02023-06-15The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory (C:\Users\Public\netSkope) for…
CVE-2023-2270High7.02023-06-15The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The co…
CVE-2021-44862High8.42022-11-03Netskope client is impacted by a vulnerability where an authenticated, local attacker can view sensitive information stored in NSClient logs which should be re…
CVE-2021-41388High7.82022-01-04Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not per…
CVE-2020-24576High8.82021-08-12Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM.
CVE-2020-28845High7.82020-11-20A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to…
CVE-2019-12091High7.82019-09-26The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The…
CVE-2019-10882High7.82019-09-26The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The…