WD Discovery Desktop App Vulnerability Allows Arbitrary Code Execution on Windows

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Western Digital WD Discovery App Vulnerability Allows Code Execution Western Digital has disclosed a critical vulnerability in its WD Discovery desktop application for Windows, tracked as CVE-2025-30248. This flaw affects version 5.2.730 and all prior releases, allowing attackers to execute arbitrary code through a DLL hijacking vulnerability in the installer. 2 sources 44