Browse CVEs

CRITICAL 9.8 CVE-2025-13476 Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking exte… Viber after 25.8.1.0 Fix from $2,3002026-03-05 MEDIUM 6.3 CVE-2025-55996 Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface Viber after 25.6.0 Fix from $1,6002025-09-12 MEDIUM 6.1 CVE-2024-41918 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorization in h… Ichiba after 12.4.0 Fix from $1,6002024-08-29 MEDIUM 5.4 CVE-2023-40282 Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Sc… Wifi Pocket Firmware Mitigation only Fix from $1,6002023-08-23 CRITICAL 9.8 CVE-2022-29525 Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the roo… Casa Mitigation only Fix from $2,3002022-06-13 HIGH 7.5 CVE-2022-26834 Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in… Casa Mitigation only Fix from $1,9502022-06-13 HIGH 7.2 CVE-2022-28704 Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege a… Casa Mitigation only Fix from $1,9502022-06-13 HIGH 7.5 CVE-2020-14049 Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, f… Viber 13.2.0.39+ Fix from $1,9502020-06-22 MEDIUM 5.5 CVE-2018-3987 An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6. The 'Secret Chats… Viber No fix yet Fix from $1,6002020-02-13 MEDIUM 6.5 CVE-2019-6024 Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the … Rakuma after 7.16.4 Fix from $1,6002019-12-26 HIGH 8.8 CVE-2019-18800 Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Viber proto… Viber after 11.7.0.5 Fix from $1,9502019-11-06 HIGH 7.8 CVE-2019-12569EPSS 15% A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnera… Viber 10.7.0+ Fix from $1,9502019-06-03