CVE-2015-1305

CVE-2015-1305 describes an arbitrary memory write vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) versions prior to 9.3.400, affecting both McAfee and Microsoft Windows XP systems. This local vulnerability, with medium attack complexity, allows an authenticated attacker to gain elevated privileges by crafting specific IOCTL calls, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code is available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.