Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wwxh-p9hv-8wfx

Опубликовано: 14 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.7

Описание

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.

EPSS

Процентиль: 5%
0.0002
Низкий

5.7 Medium

CVSS4

Дефекты

CWE-122

Связанные уязвимости

nvd
6 месяцев назад

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation can also potentially be performed by an unprivileged user whose NS Client is configured to use Endpoint DLP. A successful exploit can result in a denial-of-service for the local machine.

EPSS

Процентиль: 5%
0.0002
Низкий

5.7 Medium

CVSS4

Дефекты

CWE-122