{"vulnerability": "CVE-2024-11616", "sightings": [{"uuid": "7ee7a857-a2fb-4c62-ba8f-42ec352a2579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113678869039632655", "content": "", "creation_timestamp": "2024-12-19T09:51:24.096395Z"}, {"uuid": "caa9a662-2b53-42d2-895f-f536746b8a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnnc3krqm27", "content": "", "creation_timestamp": "2024-12-19T10:15:45.074466Z"}, {"uuid": "9044857f-e24c-4f58-8138-f640cb9526d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "seen", "source": "https://t.me/cvedetector/13316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-11616 - Netskope Endpoint DLP Double-Fetch Heap Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-11616 \nPublished : Dec. 19, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : Netskope was made aware of a security vulnerability in Netskope Endpoint DLP\u2019s Content Control Driver where a double-fetch issue leads to heap overflow. The vulnerability arises from the fact that the NumberOfBytes\u00a0argument to ExAllocatePoolWithTag, and the Length argument for RtlCopyMemory, both independently dereference their value from the user supplied input buffer inside the EpdlpSetUsbAction\u00a0function, known as a double-fetch. If this length value grows to a higher value in between these two calls, it will result in the RtlCopyMemory\u00a0call copying user-supplied memory contents outside the range of the allocated buffer, resulting in a heap overflow. A malicious attacker will need admin privileges to exploit the issue.  \nThis issue affects Endpoint DLP version below R119. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T12:18:37.000000Z"}, {"uuid": "7cf045c1-b62a-4e8e-a5f3-68ea91cdbabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "seen", "source": "https://t.me/crackvaultde/1140", "content": "\ud83d\udce2 CVE-2024-11616 - Netskope DLP Privilege Escalation Analysis\n https://crack-vault.de/d/525", "creation_timestamp": "2026-07-20T21:00:06.026404Z"}, {"uuid": "7303ea2d-efc8-48b6-ae12-12d635b0446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1139", "content": "\ud83d\udd25 Critical Buffer Overflow in Netskope DLP (CVE-2024-11616)  \n\n\ud83d\udccc Vulnerability:  \n\u2022 CVSS: 9.8 (Critical)  \n\u2022 Impact: Local privilege escalation \u2192 SYSTEM access  \n\u2022 Affected: Netskope Client < v.102.1.0  \n\n\ud83d\udea8 Immediate Actions:  \n1. Update to v.102.1.0+  \n2. Restrict local admin rights  \n3. Monitor nsdllp.exe crashes  \n\nDownload Free Here: https://tools.crack-vault.de/download-cve-2024-11616-buffer-overflow-in-netskope-endpoint-dlp\n\n\ud83d\udd0d Detection:  \nGet-WmiObject Win32_Product | Where-Object Name -like \"Netskope*\" | Select Version\n\n#EndpointSecurity #ZeroDay #InfoSec", "creation_timestamp": "2026-07-20T22:00:06.351704Z"}, {"uuid": "c39a1f86-aba7-41ee-bcf6-a2eced1c4b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1139", "content": "\ud83d\udd25 Critical Buffer Overflow in Netskope DLP (CVE-2024-11616)  \n\n\ud83d\udccc Vulnerability:  \n\u2022 CVSS: 9.8 (Critical)  \n\u2022 Impact: Local privilege escalation \u2192 SYSTEM access  \n\u2022 Affected: Netskope Client < v.102.1.0  \n\n\ud83d\udea8 Immediate Actions:  \n1. Update to v.102.1.0+  \n2. Restrict local admin rights  \n3. Monitor nsdllp.exe crashes  \n\nDownload Free Here: https://tools.crack-vault.de/download-cve-2024-11616-buffer-overflow-in-netskope-endpoint-dlp\n\n\ud83d\udd0d Detection:  \nGet-WmiObject Win32_Product | Where-Object Name -like \"Netskope*\" | Select Version\n\n#EndpointSecurity #ZeroDay #InfoSec", "creation_timestamp": "2026-07-21T00:00:10.919521Z"}, {"uuid": "adb22c80-4dd8-4f85-aebc-62bf39394601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "seen", "source": "https://t.me/crackvaultde/1140", "content": "\ud83d\udce2 CVE-2024-11616 - Netskope DLP Privilege Escalation Analysis\n https://crack-vault.de/d/525", "creation_timestamp": "2026-07-21T00:00:17.883056Z"}, {"uuid": "b45bd5f3-324c-4a06-b6c7-14e5da9c284e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11616", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1140", "content": "\ud83d\udce2 CVE-2024-11616 - Netskope DLP Privilege Escalation Analysis\n https://crack-vault.de/d/525", "creation_timestamp": "2026-07-22T00:00:34.428979Z"}]}