CVE-2026-3223 Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer

Description

Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

Affected products and versions

Product	Affected versions	Fixed in
Web Designer 14.2	earliest → < 14.2.2.0	14.2.2.0

Other CVEs of Web Designer

The 2 CVEs of Web Designer →

CVE-2025-1079 Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature 7.8 High