Google Web Designer vulnerabilities

3 known vulnerabilities affecting google/web_designer.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3

Vulnerabilities

Page 1 of 1

CVE-2026-3223HIGHCVSS 8.4fixed in 14.2.2.02026-02-27

CVE-2026-3223 [HIGH] CWE-22 CVE-2026-3223: Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google We Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

CVE-2025-4613HIGHCVSS 7.1fixed in 16.3.0.04072025-06-12

CVE-2025-4613 [HIGH] CWE-20 CVE-2025-4613: Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows a Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template

CVE-2025-1079HIGHCVSS 7.8fixed in 16.2.0.01282025-05-12

CVE-2025-1079 [HIGH] CWE-61 CVE-2025-1079: Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature