← CVE Intelligence

CVE-2026-16174

Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow PUBLISHED

Description (CNA)

Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption. Successful exploitation would require the EPDLP module to be enabled in the client configuration, and that Memory Integrity is disabled. A successful exploit could potentially result in a denial-of-service, arbitrary code execution, or privilege escalation on the local machine.

Affected (CNA)

Vendor / productVersions
Netskope / Endpoint DLPaffected 0 before 141.0

CWE

CWE-190

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.