What’s Vulnerable › Vulnerabilities

CVE-2025-57699

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-22 · updated 2026-06-17
• Weakness: CWE-428

Description

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.

Affected products

• Western Digital Corporation Western Digital Kitfox for Windows: before 1.1.1.1

References

• https://jvn.jp/en/jp/JVN75211379/
• https://www.westerndigital.com/support/product-security/wdc-25004-western-digital-kitfox-software-version-1-1-1-1

Get alerted when CVE-2025-57699 or the next vulnerability affects your stack