DLL Hijacking Vulnerability in WD Discovery by Western Digital
CVE-2025-30248

8.9HIGH

Key Information:

Vendor

Western Digital

Status
Wd Discovery
Vendor
CVE Published:
26 January 2026

What is CVE-2025-30248?

A security vulnerability in the WD Discovery Installer allows local attackers to exploit DLL hijacking through the placement of a malicious DLL in the installer’s search path. This flaw could lead to unauthorized arbitrary code execution on vulnerable systems running the affected version of the WD Discovery application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WD Discovery Windows 0 < 5.3

References

https://www.westerndigital.com/support/product-security/w...

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kazuma Matsumoto, Security Researcher at GMO Cybersecurity by IERAE, Inc
JSON
.