Support

Product Security

We provide products and services that store and transfer data with the understanding that protecting data is critical to our users. We strive to innovate and enhance our products to provide increased privacy and security. Transparency of our privacy and security practices is essential to our commitment to users, and to that end, we have created this web page to provide timely information.

Bulletins

WDC-23013 SanDisk Security Installer for Windows 1.0.0.25
WDC-23012 My Cloud OS 5 Firmware 5.27.157
WDC-23011 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.5.0-186
WDC-23010 Western Digital My Cloud Firmware Version 5.26.300
WDC-23009 Western Digital My Cloud OS 5, My Cloud Home and SanDisk ibi Firmware Update
WDC-23008 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.4.1-101
WDC-23006 My Cloud Firmware Version 5.26.202
WDC-23005 SanDisk PrivateAccess Software Update
WDC-23004 Western Digital My Cloud OS 5, My Cloud Home, SanDisk ibi and WD Cloud Mobile and Web App Update
WDC-23003 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.4.0-191
WDC-23002 My Cloud Firmware Version 5.26.119
WDC-23001 Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature
WDC-22020 Western Digital My Cloud OS 5, My Cloud Home and SanDisk ibi Firmware Update
WDC-22019 My Cloud Firmware Version 5.25.124
WDC-22018 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 8.12.0-178
WDC-22017 EdgeRover - End of Support
WDC-22016 Western Digital My Cloud Home and SanDisk ibi Firmware Version 8.11.0-113
WDC-22015 Western Digital My Cloud Home and SanDisk ibi Firmware Version 8.10.0-117
WDC-22014 WD Discovery Desktop App Version 4.4.396
WDC-22013 Sweet B Incorrect Output Vulnerabilities
WDC-22012 SanDisk ibi Firmware Version 8.9.0-108
WDC-22011 My Cloud Firmware Version 5.23.114
WDC-22010 EdgeRover Desktop App Version 1.10.0-656
WDC-22009 My Cloud Home Firmware Version 8.7.0-107
WDC-22008 My Cloud OS 5 Firmware 5.22.113
WDC-22007 SanDisk Professional G-RAID 4/8 Software Utility setup for Windows, Privilege Escalation
WDC-22006 My Cloud OS 5 Firmware 5.21.104
WDC-22005 Netatalk Security Vulnerabilities
WDC-22004 EdgeRover Desktop App Version 1.5.1-594
WDC-22003 EdgeRover Desktop App Version 1.5.0-576
WDC-22002 My Cloud OS 5 Firmware 5.19.117
WDC-22001 My Cloud OS 3 Firmware 2.12.144
Report a Security Issue

To report a security issue you believe you have found in a Western Digital product or service, please email the details of your findings to PSIRT@wdc.com. Messages sent to any other email addresses may result in a delayed response.
When possible, please include the following:

  • The specific product(s) or service(s) affected, including any relevant version numbers;
  • Details about the impact of the issue;
  • Any information that can help reproduce or diagnose the issue, including a Proof of Concept (PoC) if available; and
  • Whether you believe the vulnerability is already publicly disclosed or known to third parties.


Please use our PGP/GPG key to encrypt the information before sending it.

Vulnerability Disclosure Program

Western Digital follows a coordinated vulnerability disclosure process. For more information on the scope of our vulnerability disclosure program and what you can expect when working with Western Digital, see our Vulnerability Disclosure Policy.

Western Digital Vulnerability Disclosure Policy

Compare