CVE-2025-30248
High
Description
DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.
SeverityHigh
CVSS8.9
Exploit probability—
ProductWD Discovery
PublishedJan 26, 2026
First seenJan 26, 2026
Weakness typeCWE-427CWE-427
How to fix
Update
- Western Digital WD Discovery5.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Western Digital WD Discovery | v < 5.3 | 5.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.