Medium severity · published Apr 29, 2026
CVE-2026-2810
Endpoint DLP Driver Out-of-Bounds Read
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Netskope
before 129.1.8,132.0.23,135.1.0,136.1 · source: vendor