CVE-2025-4613

7.1 highEPSS 0.6%

High (7.1) in google web designer. EPSS 0.6% chance of exploitation in the next 30 days.

Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-20
Published: 2025-06-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:web_designer

References

https://balintmagyar.com/articles/google-web-designer-path-traversal-client-side-rce-cve-2025-4613

Check your stack JSON