CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

CVE-2025-55996

creationtimestamp| type| source ---|---|--- 2025-09-12 04:26:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51229 2025-09-12 04:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51230 2025-09-12 09:00:05+00:00| published-proof-of-concept|...

CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

CVE-2025-55996

Viber Desktop version 25.6.0 (and possibly earlier) is vulnerable to HTML Injection via the text parameter of the message compose/forward interface. The vulnerability exists because the deep-link handler (viber://forward?text=) renders unsanitized HTML provided in that parameter. While script exe...