← Back

CVE-2025-14021

nvd nist
Published: Dec 15, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: dl_cve@linecorp.com (Secondary)

Description

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content.

Affected (1)

Products: Linecorp: Line
Linecorp
1 product
Line
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Line
Before 14.14.0

Related CWEs

CWE-451
User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

References (1)

Source: dl_cve@linecorp.com
Permissions RequiredThird Party Advisory

Timeline

No history available yet.