Back to Database
Status published
Medium
CVE-2025-14021
The in-app browser in LINE client for iOS versions prior...
Vulnerability Description
The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14021
Credits & Attribution
No credits recorded in the NVD database.
References
More from LINE Corporation
View All →CVE-2025-14023
LINE client for iOS prior to 15.19 allows UI spoofing...
Low
3.1
CVE-2025-14022
LINE client for iOS prior to 15.4 allows man-in-the-middle attacks...
High
7.7
CVE-2025-14020
LINE client for Android versions prior to 14.20 contains a...
Medium
5.4
CVE-2025-14019
LINE client for Android versions from 13.8 to 15.5 is...
Low
3.4
CVE-2025-11222
Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability...
Medium
6.1
Affected Vendor
LINE Corporation
View all reports →Affected Software
LINE client for iOS
Vulnerable Versions:
14.13
Timeline
Official Publish:
December 15th, 2025
Last Modified:
December 15th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.