7.1High
CVE-2025-4613Client side RCE in Google Web Designer App
Description
Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| web designer | < 16.3.0.0407 | ||
| Web Designer App | < 16.3.0.0407 |
References and patches
- https://balintmagyar.com/articles/google-web-designer-path-traversal-client-side-rce-cve-2025-4613 ExploitThird Party Advisory
CPE matches (NVD) (1)
cpe:2.3:a:google:web_designer:*:*:*:*:*:*:*:*< 16.3.0.0407