CVE-2025-30248CWE-427

DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement…

High · published January 26, 2026

CVSS v4.0
8.9
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00604 · 48.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-01-26T22:47Z
EPSS history
Timeline
  • 26 JAN 22:47Z
    DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement…
    cvelistv5