linecorp Vulnerability Advisory Catalog

Total 91 security vulnerabilities recorded for linecorp software and firmware.

← Back to All Vendors
CVE-2026-3861 MEDIUM
Component: line

LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS...

📅 2026-04-16
CVSS 6.5 Dossier →
Component: line

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, whi...

📅 2025-12-15
CVSS 3.1 Dossier →
Component: line

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The ...

📅 2025-12-15
CVSS 7.7 Dossier →
Component: line

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malici...

📅 2025-12-15
CVSS 4.3 Dossier →
Component: line

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notifi...

📅 2025-12-15
CVSS 5.4 Dossier →
Component: line

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-s...

📅 2025-12-15
CVSS 3.4 Dossier →
Component: central_dogma

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially c...

📅 2025-12-04
CVSS 6.1 Dossier →
CVE-2024-5739 MEDIUM
Component: line

The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. This vulnerability allows for cross-sit...

📅 2024-06-12
CVSS 6.1 Dossier →
CVE-2024-1735 CRITICAL
Component: armeria

A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. A...

📅 2024-02-26
CVSS 9.1 Dossier →
CVE-2024-1143 CRITICAL
Component: central_dogma

Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent ...

📅 2024-02-02
CVSS 9.3 Dossier →
Component: line

An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of ...

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access toke...

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access tok...

📅 2024-01-26
CVSS 5.4 Dossier →
Component: line

An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-24
CVSS 5.4 Dossier →
Component: line

An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access t...

📅 2024-01-24
CVSS 5.4 Dossier →
Component: line

An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

📅 2024-01-24
CVSS 5.4 Dossier →
Component: line

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token....

📅 2024-01-24
CVSS 5.4 Dossier →
Component: line

An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access to...

📅 2024-01-24
CVSS 5.4 Dossier →
Page 1 of 4 (91 Total Records)