https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-30248.htmlhttps://patchthecve.com/cve/CVE-2025-30248.htmlWed, 17 Jun 2026 09:08:24 +0000HIGH 8.9: DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.https://patchthecve.com/cve/CVE-2025-7779.htmlhttps://patchthecve.com/cve/CVE-2025-7779.htmlWed, 17 Jun 2026 10:05:38 +0000HIGH 8.8: Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) before build 42389, Acronis True Image for SanDisk (macOS) before build 42198, Acronis True Image for Western Digital (macOS) before build 42197, Acronis True Image Ohttps://patchthecve.com/cve/CVE-2025-11178.htmlhttps://patchthecve.com/cve/CVE-2025-11178.htmlWed, 17 Jun 2026 08:29:48 +0000HIGH 7.3: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis True Image for Western Digital (Windows) before build 42636, Acronis True Image for SanDisk (Windows) before build 42679, Acronis True Image OEhttps://patchthecve.com/cve/CVE-2025-30247.htmlhttps://patchthecve.com/cve/CVE-2025-30247.htmlFri, 09 Oct 2026 09:10:00 +0000CRITICAL 9.3: An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.https://patchthecve.com/cve/CVE-2025-57699.htmlhttps://patchthecve.com/cve/CVE-2025-57699.htmlWed, 17 Jun 2026 09:43:18 +0000MEDIUM 6.7: Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.https://patchthecve.com/cve/CVE-2024-22170.htmlhttps://patchthecve.com/cve/CVE-2024-22170.htmlWed, 17 Jun 2026 07:10:52 +0000CRITICAL 9.2: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.This issue affects My Cloud: before 5.29.102.