https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13476.htmlhttps://patchthecve.com/cve/CVE-2025-13476.htmlWed, 17 Jun 2026 08:34:12 +0000CRITICAL 9.8: Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection (DPI) systems to trivially identify and block proxy traffic, undermining censorship circumvention. (CWhttps://patchthecve.com/cve/CVE-2025-55996.htmlhttps://patchthecve.com/cve/CVE-2025-55996.htmlWed, 17 Jun 2026 09:42:16 +0000MEDIUM 6.3: Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interfacehttps://patchthecve.com/cve/CVE-2024-41918.htmlhttps://patchthecve.com/cve/CVE-2024-41918.htmlWed, 17 Jun 2026 07:48:27 +0000MEDIUM 6.1: 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in handler for custom URL scheme. An arbitrary site may be displayed on the WebView of the product via Intent from another application installed on the use