CVE-2022-22996: Westerndigital Sandisk Professional G-Raid 4/8 Software Utility

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user.

Affected products

• Westerndigital Sandisk Professional G-Raid 4/8 Software Utility: before 300520006-2 (fixed in 300520006-2)
• Westerndigital Sandisk Professional G-Raid 4/8 Software Utility Driver: before 6.2.0.16-2 (fixed in 6.2.0.16-2)

Published 2022-03-30. Last modified 2026-06-17.