Address Bar Spoofing Vulnerability in LINE for iOS

CVE-2025-14021

What is CVE-2025-14021?

The in-app browser in LINE for iOS versions prior to 14.14 contains a vulnerability that allows for address bar spoofing. This issue can be exploited by attackers to inject malicious JavaScript into iframes, all while displaying what appears to be a trusted URL. This manipulation can lead to phishing attacks, where users may be misled into providing sensitive information via overlaid malicious content. Users of affected versions should consider updating to secure their applications.

References