CVE-2025-14021mediumCWE-451

CVE-2025-14021: medium-severity vulnerability in LINE client for iOS

Published

Follow this CVE+ Monitor LINE client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.2%
The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
LINE Corporation · LINE client for iOS
Related CVEs — LINE client for iOS

In the same product, most dangerous first.

CVE-2021-41011—CVE-2021-41011EPSS 1.1%CVE-2021-36215—CVE-2021-36215EPSS 0.8%CVE-2021-36214MEDIUMCVE-2021-36214EPSS 0.7%CVE-2022-41568HIGHCVE-2022-41568EPSS 0.7%CVE-2024-5739MEDIUMCVE-2024-5739EPSS 0.3%CVE-2023-5554MEDIUMCVE-2023-5554EPSS 0.3%