# CVE-2025-14021: The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could…

Source: https://junglewise.ai/threats/cve-2025-14021-the-in-app-browser-in-line-client-for-ios-versions-prior-to-14-14  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-15  
License: CC BY 4.0 with a link back

CVE-2025-14021 · Severity: medium · CVSS 4.3 · Published 2025-12-15

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content.

Technologies: [Linecorp Line](https://junglewise.ai/threats/technologies/line). Vendors: [Linecorp](https://junglewise.ai/threats/vendors/linecorp).

## Quick answers

**Is CVE-2025-14021 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-14021 being exploited in the wild.

**How severe is CVE-2025-14021?** Medium severity, with a CVSS score of 4.3, published 15 December 2025.

**Which products and versions are affected?** Linecorp Line. The advisory does not name versions.

**Is there a fix for CVE-2025-14021?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-14021?** Check whether you run Linecorp Line. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Linecorp Line

## Related threats

- [LINE client for iOS denial of service in in-app browser](https://junglewise.ai/threats/cve-2026-3861-line-client-for-ios-denial-of-service-in-in-app-browser)
- [LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the…](https://junglewise.ai/threats/cve-2025-14023-line-client-for-ios-prior-to-15-19-allows-ui-spoofing-due-to)
- [LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in…](https://junglewise.ai/threats/cve-2025-14022-line-client-for-ios-prior-to-15-4-allows-man-in-the-middle)
- [LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the…](https://junglewise.ai/threats/cve-2025-14020-line-client-for-android-versions-prior-to-14-20-contains-a-ui)
- [LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific…](https://junglewise.ai/threats/cve-2025-14019-line-client-for-android-versions-from-13-8-to-15-5-is-vulnerable)