CVE-2025-55996: XSS
Published Sep 12, 2025
·Updated
Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
Affected Software
2 affected components
Viber Desktop
Rakuten Viber Windows<=25.6.0
Event History
Sep 12, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Exploit Published
via GitHub·04:18 AM
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55996?
CVE-2025-55996 has been classified with a severity that indicates potential for HTML Injection attacks.
2
How can I fix CVE-2025-55996?
To mitigate CVE-2025-55996, update Viber Desktop to the latest version where the vulnerability has been addressed.
3
What specific vulnerability does CVE-2025-55996 exploit?
CVE-2025-55996 exploits HTML Injection via the text parameter in the message compose/forward interface of Viber Desktop.
4
Which versions of Viber Desktop are affected by CVE-2025-55996?
Viber Desktop version 25.6.0 is directly affected by CVE-2025-55996.
5
How does CVE-2025-55996 impact users?
CVE-2025-55996 allows attackers to inject malicious HTML into Viber messages, potentially leading to unauthorized actions.