Line Corporation Line Client For iOS
9 CVEs affecting Line Corporation Line Client For iOS. Latest disclosed: 2025-12-15. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14022 | High | 7.7 | 2025-12-15 | LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK inter… |
CVE-2022-41568 | High | 7.5 | 2022-11-29 | LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. |
CVE-2021-41011 | High | 7.5 | 2021-09-22 | LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually… |
CVE-2024-5739 | Medium | 6.1 | 2024-06-12 | The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. This vulnerability allows for cross-site scripti… |
CVE-2021-36214 | Medium | 6.1 | 2021-07-13 | LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView. |
CVE-2021-36215 | Medium | 5.3 | 2021-09-08 | LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling. |
CVE-2023-5554 | Medium | 4.8 | 2023-10-12 | Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0. |
CVE-2025-14021 | Medium | 4.3 | 2025-12-15 | The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaS… |
CVE-2025-14023 | Low | 3.1 | 2025-12-15 | LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could… |