CVE-2025-15641
Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with administrative privileges can potentially tamper with the customer IOCTL by sending crafted IOCTL requests to the driver. A successful exploit can result in the bypassing of all anti-tampering protections for the NSClient.Affected Product(s) and Version(s) * Product Name: Netskope Client * Affected Platform: Windows * Affected Version: All version below R138
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.8
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.16%
- CWE
- CWE-782
- Published
- 2026-06-17
- Last modified
- 2026-06-20
Affected products
- Netskope Netskope Client
Weakness type
Related vulnerabilities
- CVE-2026-16003 — Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add...
- CVE-2026-16004 — Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read...
- CVE-2026-75809 — Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to...
- CVE-2026-80117 — PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys
- CVE-2026-80116 — PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
- CVE-2026-80115 — PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL
- CVE-2026-80113 — PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL
- CVE-2019-25764 — **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC...