Read the docs
TI-2026-02414 Aliases CVE-2026-2810GHSA-4wwp-q772-ccjv

Endpoint DLP Driver Out-of-Bounds Read

Priority LOW 29CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00116 1st percentileScored 2026-11-07
Fix Fixed Client (Netskope): 129.1.8,132.0.23,135.1.0,136.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NetskopeClientbefore 129.1.8,132.0.23,135.1.0,136.1129.1.8,132.0.23,135.1.0,136.1Patch availableCNA
  • Client VendorNetskope Affected before 129.1.8,132.0.23,135.1.0,136.1 Fixed in 129.1.8,132.0.23,135.1.0,136.1 Patch available CNA

Remediation

  • Fix · CNA Client (Netskope) Fixed in 129.1.8,132.0.23,135.1.0,136.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-2810
  2. 2026-10-03 Alias added: GHSA-4wwp-q772-ccjv

References

Advisory 2

  • TI-2020-15056 Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM. CVSS 3.1HIGH 8.8
  • TI-2026-13525 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow CVSS 4.0HIGH 8.7
  • TI-2024-06860 Client Enrollment Process Bypass CVSS 4.0HIGH 8.5
  • TI-2023-04599 Local privilege escalation in Netskope Client CVSS 3.1HIGH 8.8
  • TI-2021-20302 Sensitive Information store in NSClient logs CVSS 3.1HIGH 8.4
  • TI-2023-02129 Local privilege escalation in Netskope Client CVSS 3.1HIGH 7.8
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences