Line\@

CVEs (77)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-0518	Linecorp Line\@	Med	0.38	5.9	0.01	Feb 23, 2018	LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2016-1156	Linecorp Line\@	Med	0.37	5.7	0.01	Feb 19, 2016	LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displaying a Timeline.
CVE-2022-22820	Linecorp LINE for Windows	Med	0.36	5.5	0.01	Jan 20, 2022	Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.
CVE-2025-14020	Linecorp Line\@	Med	0.35	5.4	0.00	Dec 15, 2025	LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct…
CVE-2023-48129	Linecorp Line\@	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48135	Mimasaka Farm mimasaka_farm	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48133	Angel Coffee angel coffee mini-app	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48132	kosei entertainment esportsstudioLegends mini-app	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48131	CHIGASAKI BAKERY CHIGASAKI BAKERY	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48130	GINZA CAFE GINZA CAFE mini-app	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48128	UNITED BOXING GYM UNITED BOXING GYM	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48127	Linecorp Line\@	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48126	Luxe Beauty Clinic Luxe Beauty Clinic	Med	0.35	5.4	0.00	Jan 26, 2024	An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-44001	Ailand clinic mini-app	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-44000	Otakara lapis totuka mini-app	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43999	Linecorp Line\@	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43998	Linecorp Line\@	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43997	Yoruichi hobby base mini-app	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43996	Q Co Ltd mini-app on Line	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43995	Linecorp Line\@	Med	0.35	5.4	0.00	Jan 24, 2024	An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.

CVE-2018-0518MedFeb 23, 2018
Linecorp
Line\@
risk 0.38cvss 5.9epss 0.01
LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2016-1156MedFeb 19, 2016
Linecorp
Line\@
risk 0.37cvss 5.7epss 0.01
LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displaying a Timeline.
CVE-2022-22820MedJan 20, 2022
Linecorp
LINE for Windows
risk 0.36cvss 5.5epss 0.01
Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.
CVE-2025-14020MedDec 15, 2025
Linecorp
Line\@
risk 0.35cvss 5.4epss 0.00
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct…
CVE-2023-48129MedJan 26, 2024
Linecorp
Line\@
risk 0.35cvss 5.4epss 0.00
An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48135MedJan 26, 2024
Mimasaka Farm
mimasaka_farm
risk 0.35cvss 5.4epss 0.00
An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48133MedJan 26, 2024
Angel Coffee
angel coffee mini-app
risk 0.35cvss 5.4epss 0.00
An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48132MedJan 26, 2024
kosei entertainment
esportsstudioLegends mini-app
risk 0.35cvss 5.4epss 0.00
An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48131MedJan 26, 2024
CHIGASAKI BAKERY
CHIGASAKI BAKERY
risk 0.35cvss 5.4epss 0.00
An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48130MedJan 26, 2024
GINZA CAFE
GINZA CAFE mini-app
risk 0.35cvss 5.4epss 0.00
An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48128MedJan 26, 2024
UNITED BOXING GYM
UNITED BOXING GYM
risk 0.35cvss 5.4epss 0.00
An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48127MedJan 26, 2024
Linecorp
Line\@
risk 0.35cvss 5.4epss 0.00
An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-48126MedJan 26, 2024
Luxe Beauty Clinic
Luxe Beauty Clinic
risk 0.35cvss 5.4epss 0.00
An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-44001MedJan 24, 2024
Ailand
clinic mini-app
risk 0.35cvss 5.4epss 0.00
An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-44000MedJan 24, 2024
Otakara
lapis totuka mini-app
risk 0.35cvss 5.4epss 0.00
An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43999MedJan 24, 2024
Linecorp
Line\@
risk 0.35cvss 5.4epss 0.00
An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43998MedJan 24, 2024
Linecorp
Line\@
risk 0.35cvss 5.4epss 0.00
An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43997MedJan 24, 2024
Yoruichi
hobby base mini-app
risk 0.35cvss 5.4epss 0.00
An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43996MedJan 24, 2024
Q Co Ltd
mini-app on Line
risk 0.35cvss 5.4epss 0.00
An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVE-2023-43995MedJan 24, 2024
Linecorp
Line\@
risk 0.35cvss 5.4epss 0.00
An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.

Page 3 of 4