CVE-2025-1079

Summary

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

Affected Software

VendorProductVersion RangeStatus
GoogleWeb Designer0 < 16.2.0.0128affected

Weaknesses

  • CWE-61: CWE-61

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

References