CVE-2025-4613

published 2025-06-12

CVE-2025-4613: Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking…

high 7.1 CVSS 4.0

AV N AC H AT P PR L UI A VC L VI H VA L SC L SI H SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S N AU N R U V D RE L U X

Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template

Affected

2 ranges

Vendor	Product	Version range	Fixed in
google	web_designer	< 16.3.0.0407	16.3.0.0407
google	web_designer_app	< 16.3.0.0407	16.3.0.0407

CWE-20 CWE-22