CVE-2025-15584

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an integer overflow within the filter communication port, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.

CVSS

No CVSS.

References

Link	Resource
https://support.netskope.com/s/article/NSKPSA-2025-006-Endpoint-DLP-Driver-Filter-Communication-Port-Integer-Overflow

Configurations

No configuration.

History

No history.

Information

Published : 2026-03-17 20:16

Updated : 2026-03-18 14:52

NVD link : CVE-2025-15584

Mitre link : CVE-2025-15584

CVE.ORG link : CVE-2025-15584

JSON object : View

Products Affected

No product.

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2025-15584", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "psirt@netskope.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2026-03-17T20:16:10.503", "references": [{"url": "https://support.netskope.com/s/article/NSKPSA-2025-006-Endpoint-DLP-Driver-Filter-Communication-Port-Integer-Overflow", "source": "psirt@netskope.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@netskope.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an integer overflow within the filter communication port, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine."}, {"lang": "es", "value": "Netskope fue notificado sobre una posible brecha en su M\u00f3dulo DLP de Endpoint para el Cliente Netskope en sistemas Windows. La explotaci\u00f3n exitosa de la brecha puede potencialmente permitir a un usuario sin privilegios desencadenar un desbordamiento de entero dentro del puerto de comunicaci\u00f3n del filtro, lo que lleva a una Pantalla Azul de la Muerte (BSOD). La explotaci\u00f3n exitosa requerir\u00eda que el m\u00f3dulo DLP de Endpoint est\u00e9 habilitado en la configuraci\u00f3n del cliente. Un exploit exitoso puede potencialmente resultar en una denegaci\u00f3n de servicio para la m\u00e1quina local."}], "lastModified": "2026-03-18T14:52:44.227", "sourceIdentifier": "psirt@netskope.com"}