CVE-2026-2810

MediumCVSS 6.8

Published: 29/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. Successful exploitation can allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Exploitation requires the Endpoint DLP module to be enabled in the client configuration and can result in a denial-of-service for the local machine.

Risk Assessment

An unprivileged user could trigger a system crash (BSOD), causing a denial-of-service on the local machine. The risk applies to workstations with the Endpoint DLP module enabled.

Recommendation

Update the Netskope Client to a version containing the driver fix. Until then, consider limiting local user privileges on machines with Endpoint DLP enabled.

Other vulnerabilities in Netskope Client

CVE-2026-16172Medium
Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful exploitation could potentially crash the EPDLP service, temporarily interrupting DLP enforcement, and could also reveal per-boot memory layout information to unauthorized users.

Original NVD description (English source)

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS