CVE-2015-1305: McAfee Data Loss Prevention Endpoint

Medium severity, CVSS 6.9. EPSS: 0.9% chance of exploitation in the next 30 days.

McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.

Affected products

• McAfee Data Loss Prevention Endpoint: up to and including 9.3.300

Published 2015-02-06. Last modified 2026-06-17.