Netskope
- Products in analyzed data
- 5
- Catalog vulnerabilities
- 23
Severity across 20 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 20 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, Netskope recorded 5 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Endpoint DLP had the most security vulnerabilities in the Netskope ecosystem, with 3 vulnerabilities—approximately 60% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-16174Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow | Exploitation statusNot confirmed | FixYes | Affected productEndpoint DLP | Published09/10/2026 | SeverityHigh |
CVE-2026-16172Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash | Exploitation statusNot confirmed | FixYes | Affected productEndpoint DLP | Published09/10/2026 | SeverityMedium |
CVE-2025-15642Netskope Client Service Insufficient Access Controls | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published06/17/2026 | SeverityMedium |
CVE-2025-15641Netskope Client Exposed IOCTL with Insufficient Access Controls | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published06/17/2026 | SeverityMedium |
CVE-2026-2810Endpoint DLP Driver Out-of-Bounds Read | Exploitation statusNot known exploited | FixYes | Affected productClient | Published04/29/2026 | SeverityMedium |
CVE-2026-2809Endpoint DLP Driver DLL | Exploitation statusNot known exploited | FixYes | Affected productEndpoint DLP Module for Netskope Client | Published03/17/2026 | SeverityMedium |
CVE-2025-15584Endpoint DLP Driver Filter Communication Port Integer Overflow | Exploitation statusNot known exploited | FixYes | Affected productEndpoint DLP Module for Netskope Client | Published03/17/2026 | SeverityMedium |
CVE-2025-11156Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published11/28/2025 | SeverityMedium |
CVE-2025-5942Heap Overflow in Netskope Endpoint DLP Driver | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published08/14/2025 | SeverityMedium |
CVE-2025-0309Netskope Client Local Elevation of Privileges | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published08/14/2025 | SeverityMedium |
CVE-2025-5941Out-of-Bounds Read Vulnerability in Netskope Client | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published08/14/2025 | SeverityLow |
CVE-2024-7402Netskope Client Configuration Tampering with Local MITM | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published08/14/2025 | SeverityHigh |
CVE-2024-13177Symlink Following in Netskope Client Postinstall Script | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published04/15/2025 | SeverityMedium |
CVE-2024-7401Client Enrollment Process Bypass | Exploitation statusPublic exploit | FixYes | Affected productNot confirmed | Published08/26/2024 | SeverityHigh |
CVE-2023-4996Local privilege escalation | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published11/06/2023 | SeverityMedium |
CVE-2022-4149Local privilege escalation using log file | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published06/15/2023 | SeverityHigh |
CVE-2023-2270Local privilege escalation | Exploitation statusNot known exploited | FixYes | Affected productNetskope client | Published06/15/2023 | SeverityHigh |
CVE-2021-44862Sensitive Information store in NSClient logs | Exploitation statusNot known exploited | FixYes | Affected productNSClient | Published11/03/2022 | SeverityHigh |
CVE-2021-41388CVE-2021-41388 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/04/2022 | SeverityUnknown |
CVE-2020-24576CVE-2020-24576 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/12/2021 | SeverityUnknown |
CVE-2020-28845CVE-2020-28845 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/20/2020 | SeverityUnknown |
CVE-2019-12091Netskope client command injections vulnerability | Exploitation statusNot confirmed | FixYes | Affected productNetskope client | Published09/26/2019 | SeverityHigh |
CVE-2019-10882Netskope client buffer overflow vulnerability | Exploitation statusNot confirmed | FixYes | Affected productNetskope client | Published09/26/2019 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan