Description
Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Web Designer | < 14.2.2.0 | 14.2.2.0 |
High · 8.4
CVE-2026-3223
EUVD-2026-9027GHSA-pcr3-6v45-6mc2
Zip Slip leading to Arbitrary File Write and Privilege Escalation in Google Web Designer
Published Feb 27, 2026 · Updated Mar 4, 2026 · Assigned by Google