Linecorp - vulnerabilities (CVEs)

93 CVEs in 15 products, 0 in the last 30 days, newest from 2026-04-16.

Products

• Line - 75 CVEs
• Armeria - 5 CVEs
• Central Dogma - 3 CVEs
• Apng-drawable - 1 CVEs
• Fukunaga Memberscard - 1 CVEs
• Line Installer - 1 CVEs
• Line Music - 1 CVEs
• Matsuya - 1 CVEs
• Onigiriya-musubee - 1 CVEs
• Regina Sweets&bakery - 1 CVEs
• Tokueimaru Waiting - 1 CVEs
• Tonton-tei - 1 CVEs
• Trackdiner10/10 Mc - 1 CVEs
• Uomasa Saiji New - 1 CVEs
• Line@ - 0 CVEs

Newest CVEs of Linecorp

• CVE-2026-3861 - CVSS 7.1 (high), 2026-04-16: LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level…
• CVE-2025-14023 - CVSS 4.3 (medium), 2025-12-15: LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could…
• CVE-2025-14022 - CVSS 7.7 (high), 2025-12-15: LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK…
• CVE-2025-14021 - CVSS 4.3 (medium), 2025-12-15: The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious…
• CVE-2025-14020 - CVSS 5.4 (medium), 2025-12-15: LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification…
• CVE-2025-14019 - CVSS 4.7 (medium), 2025-12-15: LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen…
• CVE-2025-11222 - CVSS 6.1 (medium), 2025-12-04: Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted…
• CVE-2024-5739 - CVSS 6.1 (medium), 2024-06-12: The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. This vulnerability allows for cross-site…
• CVE-2024-1735 - CVSS 9.1 (critical), 2024-02-26: A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users…
• CVE-2024-1143 - CVSS 9.3 (critical), 2024-02-02: Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent…
• CVE-2023-48129 - CVSS 5.4 (medium), 2024-01-26: An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48135 - CVSS 5.4 (medium), 2024-01-26: An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48133 - CVSS 5.4 (medium), 2024-01-26: An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48132 - CVSS 5.4 (medium), 2024-01-26: An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the…
• CVE-2023-48130 - CVSS 5.4 (medium), 2024-01-26: An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48128 - CVSS 5.4 (medium), 2024-01-26: An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48131 - CVSS 5.4 (medium), 2024-01-26: An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48126 - CVSS 5.4 (medium), 2024-01-26: An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-48127 - CVSS 5.4 (medium), 2024-01-26: An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43996 - CVSS 5.4 (medium), 2024-01-24: An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43999 - CVSS 5.4 (medium), 2024-01-24: An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43998 - CVSS 5.4 (medium), 2024-01-24: An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-44001 - CVSS 5.4 (medium), 2024-01-24: An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43997 - CVSS 5.4 (medium), 2024-01-24: An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-44000 - CVSS 5.4 (medium), 2024-01-24: An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43993 - CVSS 5.4 (medium), 2024-01-24: An issue in smaregi_app_market mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43989 - CVSS 5.4 (medium), 2024-01-24: An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43992 - CVSS 5.4 (medium), 2024-01-24: An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43995 - CVSS 5.4 (medium), 2024-01-24: An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
• CVE-2023-43988 - CVSS 5.4 (medium), 2024-01-24: An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.