Integer Overflow Vulnerability in Netskope Endpoint DLP on Windows Systems

CVE-2026-16174

What is CVE-2026-16174?

Netskope's Endpoint DLP (EPDLP) on Windows systems has been identified to have a vulnerability that allows a privileged user to execute a specially crafted message to the EPDLP process port. This could trigger an integer overflow, leading to critical memory corruption issues. Exploiting this vulnerability requires the EPDLP module to be activated in the client configuration with Memory Integrity disabled. Consequently, this could result in various attack vectors, such as denial-of-service conditions, arbitrary code execution, or privilege escalation on the affected local machine.

References