Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-2810— Endpoint DLP Driver Out-of-Bounds Read

Quick assessment

Affected
Netskope Client
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Netskope Client是美国Netskope公司的一款用于连接管理Netskope云平台的客户端程序。 Netskope Client存在缓冲区错误漏洞，该漏洞源于端点DLP模块存在潜在缺陷，可能导致非特权用户触发驱动程序中的越界读取，导致蓝屏死机。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.15% · P4

Affected Version Matrix 1

VendorProduct Version RangeStatus
Netskope Client < 129.1.8,132.0.23,135.1.0,136.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-2810

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Endpoint DLP Driver Out-of-Bounds Read
Source: CVE Program / CVE List V5
Vulnerability Description
Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death (BSOD). Successful exploitation would require the Endpoint DLP module to be enabled in the client configuration. A successful exploit can potentially result in a denial-of-service for the local machine.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
Netskope Client 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Netskope Client是美国Netskope公司的一款用于连接管理Netskope云平台的客户端程序。 Netskope Client存在缓冲区错误漏洞，该漏洞源于端点DLP模块存在潜在缺陷，可能导致非特权用户触发驱动程序中的越界读取，导致蓝屏死机。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Netskope Client 0 ~ 129.1.8,132.0.23,135.1.0,136.1 -

II. Public POCs for CVE-2026-2810

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-2810

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-2810 (2)

IV. Related Vulnerabilities

Same product: Client
Same vendor: Netskope
Same weakness: CWE-125

V. Comments for CVE-2026-2810

No comments yet

Leave a comment