CVE-2026-16172

MediumCVSS 6.0

Published: 10/09/2026(UTC)Updated: 18/09/2026(UTC)Translated: 11/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful exploitation could potentially crash the EPDLP service, temporarily interrupting DLP enforcement, and could also reveal per-boot memory layout information to unauthorized users.

Risk Assessment

An attacker could temporarily disable DLP protection and obtain memory layout information, potentially facilitating further attacks. This compromises the availability and confidentiality of security mechanisms.

Recommendation

Update the Netskope Client to a version containing the fix for the out-of-bounds heap read. Monitor for exploitation attempts and restrict local access to systems with the client installed.

Other vulnerabilities in Netskope Client

CVE-2026-2810Medium
Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. Successful exploitation can allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Exploitation requires the Endpoint DLP module to be enabled in the client configuration and can result in a denial-of-service for the local machine.

Original NVD description (English source)

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful exploitation could potentially crash the EPDLP service, temporarily interrupting DLP enforcement. A successful exploit could potentially also reveal per-boot memory layout information to unauthorized users.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS