CVE-2025-1079

CWE-61CWE-593 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 74.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google WEB Designer
Timeline
PublishedMay 12

Description

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5google/web_designer< 16.2.0.0128
▶NVDgoogle/web_designer< 16.2.0.0128

🔴Vulnerability Details

2
GHSA
GHSA-r2rx-5q74-ppjp: Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature↗2025-05-12
▶
CVEList
RCE In Google Web Designer↗2025-05-12
▶
CVE-2025-1079 (HIGH CVSS 7.8) | Client RCE on macOS and Linux via i | cvebase.io