CVE-2025-4613

Client side RCE in Google Web Designer App

CVSS 7.1 HIGHEPSS 0.6%CWE-20

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.1EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 jun 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L

Productos afectados

Google · Web Designer App

Referencias

https://balintmagyar.com/articles/google-web-designer-path-traversal-client-side-rce-cve-2025-4613