Lucene search
+L

43 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/14 12:00 a.m.•6 views

The vulnerability of the EndPoint DLP module of the remote access user protection agent for corporate resources and applications provided by Palo Alto Networks’ Prisma Access Agent allows attackers to bypass existing security mechanisms and expose protected information.

The vulnerability of the EndPoint DLP module of the remote user access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows attackers to bypass existing security measure...

5.5CVSS6.4AI score0.00105EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/09/11 1:57 p.m.•44 views

CVE-2026-15710 Netskope Client Endpoint DLP Kernel Driver Information Leakage

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

6.8CVSS0.00104EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/11 12:31 a.m.•17 views

EUVD-2026-75879

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

6CVSS5.8AI score0.00114EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•3 views

CVE-2026-15710: Use of Uninitialized Resource

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

6.8CVSS6AI score0.00104EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/10 11:16 p.m.•17 views

CVE-2026-16174

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

8.7CVSS0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 10:51 p.m.•47 views

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

8.7CVSS0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 10:51 p.m.•52 views

CVE-2026-16174

Netskope Endpoint DLP (EPDLP) running on Windows is affected by an integer overflow in the EPDLP process port handling, leading to a kernel pool overflow and memory corruption. Exploitation requires a privileged user to send a crafted message to the EPDLP process port, with the EPDLP module enabl...

8.7CVSS6.1AI score0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 10:51 p.m.•16 views

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

8.7CVSS6.1AI score0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 10:45 p.m.•16 views

CVE-2026-16172 Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

6CVSS5.9AI score0.00114EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•2 views

CVE-2026-16174: Integer Overflow or Wraparound

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

8.7CVSS6AI score0.00134EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•17 views

PT-2026-89652

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

8.7CVSS6AI score0.00134EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•21 views

PT-2026-89651

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

6CVSS5.8AI score0.00114EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•4 views

CVE-2026-16172: Out-of-bounds Read

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

6CVSS5.8AI score0.00114EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:29 p.m.•20 views

CVE-2026-2810

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death BSOD. Successful...

6.8CVSS5.4AI score0.00152EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:25 p.m.•20 views

CVE-2026-0247

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations...

8.5CVSS5.6AI score0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/13 6:46 p.m.•38 views

CVE-2026-0247

The CVE-2026-0247 entry refers to multiple authorization-bypass vulnerabilities in the Endpoint DLP component of the Prisma Access Agent. The underlying issue allows a local attacker to bypass authentication controls and perform privileged operations. The description specifies affected software a...

8.5CVSS5.9AI score0.00152EPSS
SaveExploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
•added 2026/05/13 4:00 p.m.•7 views

Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations. Work around: No known workarounds exist for this issue...

8.5CVSS7.3AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•27 views

PT-2026-40771

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations...

8.5CVSS5.9AI score0.00152EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•1 views

CVE-2026-0247: Missing Authentication for Critical Function

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations...

8.5CVSS6AI score0.00152EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/29 4:16 p.m.•19 views

CVE-2026-2810

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death BSOD. Successful...

6.8CVSS0.00152EPSS
SaveExploits0References2
Rows per page
Query Builder