CVE-2025-4613highCWE-20

CVE-2025-4613: high-severity vulnerability in Google Web Designer App

Client side RCE in Google Web Designer App

Published · Updated

Follow this CVE+ Monitor Web Designer App

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.6%
Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L
Affected products
Google · Web Designer App