Findings

CVE-2026-3223

Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

Published Feb 27, 2026 · updated Jun 17, 2026 · google web designer

Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 27, 2026 · NIST NVD

    Detected

    Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

Affected

  • cpe google/web designer14.2.2.0

Sources

  • NIST NVDVulnerability recordCVE-2026-3223

    Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.

    nvd.nist.gov

References