Google Web Designer PT in Template Parser before 16.3.0.0407 (RCE)
CVE-2025-4613 Published on June 12, 2025
Client side RCE in Google Web Designer App
Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template
Vulnerability Analysis
CVE-2025-4613 can be exploited with network access. This vulnerability is consided to have a high level of attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2025-4613. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2025-4613
Want to know whenever a new CVE is published for Google Web Designer? stack.watch will email you.
Affected Versions
Google Web Designer App:- Before 16.3.0.0407 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.