CVE-2025-4613

Client side RCE in Google Web Designer App

CVSS 7.1 HIGHEPSS 0.6%CWE-20

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.1EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 jun 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L

Produtos afetados

Google · Web Designer App

Referências

https://balintmagyar.com/articles/google-web-designer-path-traversal-client-side-rce-cve-2025-4613