# cve.now: Line Corporation

The newest entries naming Line Corporation as an affected vendor (up to 200), of 26 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-14023](https://cve.now/CVE-2025-14023.md): LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user inte (CVSS 3.1)
- [CVE-2025-14022](https://cve.now/CVE-2025-14022.md): LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial (CVSS 7.7)
- [CVE-2025-14021](https://cve.now/CVE-2025-14021.md): The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to exec (CVSS 4.3)
- [CVE-2025-14020](https://cve.now/CVE-2025-14020.md): LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security To (CVSS 5.4)
- [CVE-2025-14019](https://cve.now/CVE-2025-14019.md): LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure (CVSS 3.4)
- [CVE-2025-11222](https://cve.now/CVE-2025-11222.md): Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via s (CVSS 6.1)
- [CVE-2024-5739](https://cve.now/CVE-2024-5739.md): The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. (CVSS 6.1)
- [CVE-2024-1735](https://cve.now/CVE-2024-1735.md): A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authent (CVSS 9.1)
- [CVE-2024-1143](https://cve.now/CVE-2024-1143.md): Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and s (CVSS 9.3)
- [CVE-2015-2968](https://cve.now/CVE-2015-2968.md): LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allo (no CVSS)
- [CVE-2015-0897](https://cve.now/CVE-2015-0897.md): LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack sinc (no CVSS)
- [CVE-2023-5554](https://cve.now/CVE-2023-5554.md): Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0. (CVSS 4.8)
- [CVE-2023-38493](https://cve.now/CVE-2023-38493.md): Paths contain matrix variables bypass decorators (CVSS 7.5)
- [CVE-2022-41568](https://cve.now/CVE-2022-41568.md): LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. (CVSS 7.5)
- [CVE-2022-29505](https://cve.now/CVE-2022-29505.md): Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege (no CVSS)
- [CVE-2022-22820](https://cve.now/CVE-2022-22820.md): Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipie (no CVSS)
- [CVE-2021-43795](https://cve.now/CVE-2021-43795.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria (CVSS 7.5)
- [CVE-2021-41011](https://cve.now/CVE-2021-41011.md): LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditio (no CVSS)
- [CVE-2021-38388](https://cve.now/CVE-2021-38388.md): Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the (CVSS 8.8)
- [CVE-2021-36216](https://cve.now/CVE-2021-36216.md): LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection. (no CVSS)
- [CVE-2021-36215](https://cve.now/CVE-2021-36215.md): LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling. (no CVSS)
- [CVE-2021-36214](https://cve.now/CVE-2021-36214.md): LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView. (CVSS 6.1)
- [CVE-2019-16771](https://cve.now/CVE-2019-16771.md): Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria (CVSS 4.8)
- [CVE-2019-6010](https://cve.now/CVE-2019-6010.md): Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2019-6002](https://cve.now/CVE-2019-6002.md): Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web script or HTML via unsp (no CVSS)
- [CVE-2018-0518](https://cve.now/CVE-2018-0518.md): LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/line
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.