An out-of-bounds read in the Netskope Endpoint DLP driver can be triggered by a local unprivileged user when the DLP module is enabled, causing a Blue‑Screen‑of‑Death. The vulnerability is a classic buffer reading flaw (CWE‑125) that does not leak sensitive data but results in a local crash and loss of availability for the affected machine.

All Windows installations of the Netskope Client that have the Endpoint DLP module enabled are affected. No specific version range has been published, so any release of the client with the DLP module active is potentially vulnerable.

With a CVSS score of 6.8, this flaw is considered moderate in severity. The attack is local and requires an unprivileged user to target the running client; therefore exploitation is straightforward for anyone who operates the machine. Although the EPSS score is unavailable and the vulnerability is not listed in CISA's KEV catalog, the potential for a Blue‑Screen‐of‑Death means that an exploited system will be unusable until rebooted, effectively denying service to any local user.