Skip to content
OpenAdvisories

Product · Netskope

Endpoint DLP

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.8

    Netskope Client Endpoint DLP Kernel Driver Information Leakage

    An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the …

  • Medium 6.0

    Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

    Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing…

  • Medium 5.6
    CVE-2024-11616 Public exploit

    Double-fetch heap overflow

    Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vulnerability arises from the fact that the NumberOfBytes argument to ExAllocatePoolWithTag, and the L…