CVE-2025-1079: Google Web Designer

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

Affected products

• Google Web Designer: before 16.2.0.0128 (fixed in 16.2.0.0128)

Published 2025-05-12. Last modified 2026-06-17.