CVE-2025-0309 - CVE House
Back to Database
Status published Medium CVE-2025-0309

Netskope Client Local Elevation of Privileges

Vulnerability Description

An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0309

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Richard Warren

References

More from Netskope

View All →
CVE-2025-5942
Heap Overflow in Netskope Endpoint DLP Driver
Medium 5.7
CVE-2025-5941
Out-of-Bounds Read Vulnerability in Netskope Client
Low 2
CVE-2025-15642
Netskope Client Service Insufficient Access Controls
Medium 6.8
CVE-2025-15641
Netskope Client Exposed IOCTL with Insufficient Access Controls
Medium 6.8
CVE-2025-15584
Endpoint DLP Driver Filter Communication Port Integer Overflow
Medium 6.8

Affected Vendor

Affected Software

Netskope Client
Vulnerable Versions:
0

Timeline

Official Publish: August 14th, 2025
Last Modified: August 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.