CVE-2026-2809

Description

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.

PUBLISHED Reserved 2026-02-19 | Published 2026-03-17 | Updated 2026-03-18 | Assigner Netskope

Problem types

CWE-190 Integer overflow or wraparound

Product status

Credits

Tom Brice reporter

References

support.netskope.com/...Driver-DLL-Injector-Integer-Overflow vendor-advisory permissions-required

cve.org (CVE-2026-2809)

nvd.nist.gov (CVE-2026-2809)

Download JSON