CVE-2025-57699 – Western Digital Kitfox for Windows Unquoted Service Path Privilege Escalation Vulnerability

CVE ID : CVE-2025-57699

Published : Aug. 22, 2025, 7:15 a.m. | 1 hour, 9 minutes ago

Description : Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path.
A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.

Severity: 8.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…