CVE-2025-1079CWE-61

RCE In Google Web Designer

High · published May 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2025-05-12T20:03Z
EPSS history
Timeline
  • 12 MAY 20:03Z
    RCE In Google Web Designer
    cvelistv5