PatchTheCVEviber vulnerabilities and fixes
Recent CVEs affecting viber, with upgrade or downgrade steps. 2 tracked.
viber has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-05. Highest priority: CVE-2025-13476 (score 47/100).
- CVE-2025-55996 MEDIUM 6.3 UPGRADE Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward int
- CVE-2025-13476 CRITICAL 9.8 UPGRADE DOWNGRADE Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable T
FAQ
How do I fix viber vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is viber being exploited right now?
None of the tracked viber CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which viber CVE should I patch first?
CVE-2025-13476 currently ranks highest (47/100): Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable T.