CVE-2015-1305

McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to...

6.9 MediumPublic exploit

McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.

Exploit likelihood

0.88%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Record: CVE-2015-1305
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-1305
Updated: 2026-11-02

EUVDEUVD-2015-1446 No score

Record: EUVD-2015-1446
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f4qv-92x7-9234 No score

McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to...

Record: GHSA-f4qv-92x7-9234
Updated: 2026-11-02

Affected products

mcafee data loss prevention endpoint

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	McAfee Data Loss Prevention Endpoint - Arbitrary Write Privilege Escalation	2015-01-30

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1305 is a medium vulnerability (CVSS 6.9) in Mcafee Data Loss Prevention Endpoint, published February 6, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. No source names a fixed version.