Google Web Designer vulnerabilities

Latest Google Web Designer CVEs

Newest publication first

1. CVE-2026-3223 Zip Slip leading to Arbitrary File Write and Privilege Escalation in Google Web Designer

   Published 2026-02-27

   High·CVSS 8.4 EPSS 0.16%

   Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

2. CVE-2025-4613 Client side RCE in Google Web Designer App

   Published 2025-06-12

   High·CVSS 7.1 EPSS 0.63%

   Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template

3. CVE-2025-1079 RCE In Google Web Designer

   Published 2025-05-12

   High·CVSS 7.8 EPSS 0.16%

   Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.