WD Discovery Desktop App for Windows Vulnerability Enables Arbitrary Code Execution

Cybersecuritynews •Abinaya • January 27, 2026

A serious security vulnerability in Western Digital’s WD Discovery desktop application has been disclosed, potentially allowing attackers to execute arbitrary code on Windows systems. The flaw, tracked as CVE-2025-30248, affects WD Discovery version 5.2.730 and all prior releases. The security issue involves a DLL hijacking vulnerability within the WD Discovery installer. This type of attack […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Western Digital WD Discovery App Vulnerability Allows Code Execution Western Digital has disclosed a critical vulnerability in its WD Discovery desktop application for Windows, tracked as CVE-2025-30248. This flaw affects version 5.2.730 and all prior releases, allowing attackers to execute arbitrary code through a DLL hijacking vulnerability in the installer. 2 sources 44

Extracted Entities

WD Discovery Desktop App for Windows Vulnerability Enables Arbitrary Code Execution

The full story

Extracted Entities

Companies (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)