PT-2025-51205 · Line · Line

Published 2025-12-15 · Updated 2025-12-15 · CVE-2025-14021

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions LINE versions prior to 14.14

Description The in-app browser in LINE client for iOS is susceptible to address bar spoofing. This could enable attackers to execute malicious JavaScript within iframes while displaying trusted URLs. This allows for phishing attacks through overlaid malicious content.

Recommendations Update to version 14.14 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2025-14021

Affected Products

Line

References · 8

• https://osv.dev/vulnerability/CVE-2025-14021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14021 · Security Note
• https://t.me/cveNotify/145778 · Telegram Post
• https://twitter.com/CVEnew/status/2000611219586359669 · Twitter Post
• https://t.me/CVEtracker/39812 · Telegram Post
• https://hackerone.com/reports/2548498 · Note
• https://t.me/cveNotify/145750 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2000484616319217692 · Twitter Post