Viber

2 CVEs product

Monthly

CVE-2025-13476 CRITICAL Act Now

Static TLS fingerprint in Rakuten Viber Cloak mode enables tracking despite privacy mode.

Windows Android Tls Viber
NVD
CVSS 3.1
9.8
EPSS
0.0%
CVE-2025-55996 MEDIUM This Month

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Viber
NVD GitHub
CVSS 3.1
6.3
EPSS
0.0%
CVE-2025-13476
EPSS 0% CVSS 9.8
CRITICAL Act Now

Static TLS fingerprint in Rakuten Viber Cloak mode enables tracking despite privacy mode.

Windows Android Tls +1
NVD
CVE-2025-55996
EPSS 0% CVSS 6.3
MEDIUM This Month

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Viber
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy