← All advisories

High severity7.8NVD Advisory· Published Feb 27, 2026· Updated Apr 14, 2026

CVE-2026-3223

CVE-2026-3223

Description

Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

Affected products

2

Google/Web Designer2 versions
cpe:2.3:a:google:web_designer:14.2.2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:web_designer:14.2.2.0:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

bughunters.google.com/reports/vrp/FJMQGy8oonvdExploitVendor Advisory

News mentions

0

No linked articles in our index yet.