Western Digital Wd Discovery vulnerabilities

2 CVEs affecting Western Digital Wd Discovery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30248, published 2026-01-26.

More from Western Digital.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-30248, published 2026-01-26. High severity, CVSS 8.9. EPSS: 0.6% chance of exploitation in the next 30 days. DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's…
• CVE-2024-22169, published 2024-08-02. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. WD Discovery versions prior to 5.0.589 contain a misconfiguration in the Node.js environment settings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE' environment variable. Any…