Netskope’s Endpoint DLP Module for the Netskope Client on Windows contains an integer‑overflow bug in the filter communication port. When triggered by an unprivileged user, the overflow can cause the system to crash with a Blue‑Screen‑of‑Death, resulting in a denial‑of‑service for the local machine. The weakness is classified as CWE‑190 (Integer Overflow or Wraparound).

Affected systems include the Netskope Endpoint DLP Module for the Netskope Client on Windows. Specific version information is not provided in the vendor data; therefore, all installed versions of the module may be potentially impacted until the vendor releases a patch.

The vulnerability has a CVSS score of 6.8, indicating moderate severity. EPSS information is not available, and the vulnerability is not listed in CISA’s KEV catalog. The expected attack vector is a local user with unprivileged rights who can execute code on the target machine to trigger the integer overflow, leading to a BSOD. Given the lack of a publicly available exploit and the local nature of the attack, the likelihood of widespread exploitation is moderate but not negligible.