CVE-2025-30248: Western Digital Wd Discovery

High severity, CVSS 8.9. EPSS: 0.6% chance of exploitation in the next 30 days.

DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.

Affected products

• Western Digital Wd Discovery: before 5.3 (fixed in 5.3)

Published 2026-01-26. Last modified 2026-06-17.