Netskope Endpoint DLP Module for Client up to 132.0.19/134/132.0.20/134 on Windows integer overflow

Summaryinfo

A vulnerability was found in Netskope Endpoint DLP Module for Client up to 132.0.19/134/132.0.20/134 on Windows. It has been declared as problematic. This impacts an unknown function. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2026-2809. The attack requires local access. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Netskope Endpoint DLP Module for Client up to 132.0.19/134/132.0.20/134 on Windows. It has been declared as problematic. This vulnerability affects some unknown processing. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect availability. CVE summarizes:

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.

The advisory is shared for download at support.netskope.com. This vulnerability was named CVE-2026-2809 since 02/19/2026. The exploitation appears to be easy. The attack needs to be approached locally. Additional levels of successful authentication are necessary for exploitation. There are neither technical details nor an exploit publicly available.

Upgrading to version 132.0.20 or 135 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Data Loss Prevention Software

Vendor

• Netskope

Name

• Endpoint DLP Module for Client

Version

• 132.0.0
• 132.0.1
• 132.0.2
• 132.0.3
• 132.0.4
• 132.0.5
• 132.0.6
• 132.0.7
• 132.0.8
• 132.0.9
• 132.0.10
• 132.0.11
• 132.0.12
• 132.0.13
• 132.0.14
• 132.0.15
• 132.0.16
• 132.0.17
• 132.0.18
• 132.0.19
• 132.0.20
• 134

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion