CVE-2026-3861: User Interface (UI) Misrepresentation of Critical Information

LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes, potentially causing the iOS device to become temporarily...

CVE-2025-14023: User Interface (UI) Misrepresentation of Critical Information

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions...

CVE-2025-14022: Improper Certificate Validation

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

CVE-2024-5739: Improper Neutralization of Input During Web Page Generation

The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS UXSS vulnerability. This vulnerability allows for cross-site scripting XSS where arbitrary JavaScript can be executed in the top frame from an embedded iframe on any displayed web site within the in-app...

PT-2021-23047

Name of the Vulnerable Software and Affected Versions LINE client for iOS versions prior to 11.15.0 Description The issue might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side...

PT-2021-21180

Name of the Vulnerable Software and Affected Versions LINE client for iOS version 10.21.3 and before Description The issue is related to address bar spoofing due to inappropriate address handling. This allows for potential manipulation of the address bar. Recommendations For versions 10.21.3 and...

PT-2021-21179

Name of the Vulnerable Software and Affected Versions LINE client for iOS versions prior to 10.16.3 Description The issue allows for cross-site scripting with a specific header in WebView. Recommendations For versions prior to 10.16.3, update to version 10.16.3 or later to resolve the issue...