Netskope is recognized as a Leader again in the Gartner® Magic Quadrant™ for SASE Platforms and Security Service Edge
Netskope Security Advisory – Netskope Client Endpoint DLP Security Notice
Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, crashing the kernel driver handler. Successful exploitation could potentially crash the Endpoint DLP service, temporarily interrupting DLP enforcement. A successful exploit could potentially also reveal per-boot memory layout information to unauthorized users.
Security Advisory ID: NSKPSA-2026-008
Version: 1.0
Status: Published
First Published: September 10, 2026
Description
Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, crashing the kernel driver handler. Successful exploitation could potentially crash the Endpoint DLP service, temporarily interrupting DLP enforcement. A successful exploit could potentially also reveal per-boot memory layout information to unauthorized users.
Affected Product(s) and Version(s)
Product Name: Netskope Endpoint DLP
Affected Platform: Windows
Affected Version: All versions below R141
CVE-ID(s)
CVE-2026-16172
Remediation
Netskope has released a security patch for the issue. Please see below
Patch versions:
R141 and above
Netskope upgrade instructions are listed here and Netskope download Instructions are listed on Support portal – Download Netskope Client and Scripts – Netskope Support
Workaround
There are no workarounds available at this time.
General Security Best Practices
Netskope recommends using security hardening options available in the product and configuring them to harden the security of a Netskope tenant- https://docs.netskope.com/en/secure-tenant-configuration-and-hardening/
Special Notes and Acknowledgement
This issue was discovered during Netskope’s participation in Project Glasswing.
Exploitation and Public Disclosures
Netskope is not aware of any public disclosure or active exploitation of this issue.
Revision History
| Version | Date | Section | Notes |
|---|---|---|---|
| 1.0 | 10 September 2026 | All | Initial Draft |
Legal Disclaimer:
To the maximum extent permitted by applicable law, information provided in this notice is provided “as is” without warranty of any kind. Your use of the information in this notice or materials linked herein are at your own risk. This notice and all aspects of Netskope’s Product Security Incident Response Policy are subject to change without notice. Response is not guaranteed for any specific issue or class of issues. Your entitlements regarding warranties, support and maintenance, including vulnerabilities in any Netskope software or service, are governed solely by the applicable master agreement between Netskope and you. The statements in this notice do not modify, enlarge or otherwise amend any of your rights under the applicable master agreement, or create any additional warranties or commitments.
About Netskope
Netskope (NASDAQ: NTSK), a leader in modern security and networking for the cloud and AI era, addresses the needs of both security and networking teams by providing optimized access and real-time, context-based security for the AI ecosystem inclusive of agents, applications, tools, LLMs, people, devices, and data. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and its powerful NewEdge network to reduce risk and gain full visibility and control over cloud, AI, SaaS, web, and private applications – providing security and accelerating performance without trade-offs. Learn more at www.netskope.com, Netskope.ai, on LinkedIn, and Instagram.