Vulnerability Details CVE-2026-3861
LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes, potentially causing the iOS device to become temporarily inoperable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 22.4%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-3861
-
cpe:2.3:a:linecorp:line:10.0.0
-
cpe:2.3:a:linecorp:line:10.0.1
-
cpe:2.3:a:linecorp:line:10.0.2
-
cpe:2.3:a:linecorp:line:10.1.0
-
cpe:2.3:a:linecorp:line:10.1.1
-
cpe:2.3:a:linecorp:line:10.16.3
-
cpe:2.3:a:linecorp:line:10.21.3
-
cpe:2.3:a:linecorp:line:11.0.0
-
cpe:2.3:a:linecorp:line:11.1.0
-
cpe:2.3:a:linecorp:line:11.10.0
-
cpe:2.3:a:linecorp:line:11.11.0
-
cpe:2.3:a:linecorp:line:11.12.0
-
cpe:2.3:a:linecorp:line:11.12.1
-
cpe:2.3:a:linecorp:line:11.13.0
-
cpe:2.3:a:linecorp:line:11.15.0
-
cpe:2.3:a:linecorp:line:11.16.0
-
cpe:2.3:a:linecorp:line:11.2.0
-
cpe:2.3:a:linecorp:line:11.3.0
-
cpe:2.3:a:linecorp:line:11.4.0
-
cpe:2.3:a:linecorp:line:11.4.1
-
cpe:2.3:a:linecorp:line:11.5.0
-
cpe:2.3:a:linecorp:line:11.5.1
-
cpe:2.3:a:linecorp:line:11.6.0
-
cpe:2.3:a:linecorp:line:11.6.1
-
cpe:2.3:a:linecorp:line:11.6.5
-
cpe:2.3:a:linecorp:line:11.7.0
-
cpe:2.3:a:linecorp:line:11.7.1
-
cpe:2.3:a:linecorp:line:11.8.0
-
cpe:2.3:a:linecorp:line:11.8.1
-
cpe:2.3:a:linecorp:line:11.8.2
-
cpe:2.3:a:linecorp:line:11.9.0
-
cpe:2.3:a:linecorp:line:13.16.0
-
cpe:2.3:a:linecorp:line:14.0.0
-
cpe:2.3:a:linecorp:line:7.0.0
-
cpe:2.3:a:linecorp:line:7.1.3
-
cpe:2.3:a:linecorp:line:7.15
-
cpe:2.3:a:linecorp:line:8.0.2
-
cpe:2.3:a:linecorp:line:8.1.0
-
cpe:2.3:a:linecorp:line:8.1.1
-
cpe:2.3:a:linecorp:line:8.11.0
-
cpe:2.3:a:linecorp:line:8.11.1
-
cpe:2.3:a:linecorp:line:8.12.0
-
cpe:2.3:a:linecorp:line:8.12.1
-
cpe:2.3:a:linecorp:line:8.13.0
-
cpe:2.3:a:linecorp:line:8.14.5
-
cpe:2.3:a:linecorp:line:8.16.0
-
cpe:2.3:a:linecorp:line:8.16.1
-
cpe:2.3:a:linecorp:line:8.2.0
-
cpe:2.3:a:linecorp:line:8.2.1
-
cpe:2.3:a:linecorp:line:8.3.0
-
cpe:2.3:a:linecorp:line:8.3.1
-
cpe:2.3:a:linecorp:line:8.4.0
-
cpe:2.3:a:linecorp:line:8.4.1
-
cpe:2.3:a:linecorp:line:8.5.0
-
cpe:2.3:a:linecorp:line:8.5.1
-
cpe:2.3:a:linecorp:line:8.5.2
-
cpe:2.3:a:linecorp:line:8.6.0
-
cpe:2.3:a:linecorp:line:8.6.1
-
cpe:2.3:a:linecorp:line:8.7.0
-
cpe:2.3:a:linecorp:line:8.8.0
-
cpe:2.3:a:linecorp:line:8.9.0
-
cpe:2.3:a:linecorp:line:9.1.0
-
cpe:2.3:a:linecorp:line:9.12.0
-
cpe:2.3:a:linecorp:line:9.13.0
-
cpe:2.3:a:linecorp:line:9.15.0
-
cpe:2.3:a:linecorp:line:9.15.1
-
cpe:2.3:a:linecorp:line:9.16.0
-
cpe:2.3:a:linecorp:line:9.16.1
-
cpe:2.3:a:linecorp:line:9.16.5
-
cpe:2.3:a:linecorp:line:9.16.6
-
cpe:2.3:a:linecorp:line:9.18.0
-
cpe:2.3:a:linecorp:line:9.18.1
-
cpe:2.3:a:linecorp:line:9.19.0
-
cpe:2.3:a:linecorp:line:9.2.0
-
cpe:2.3:a:linecorp:line:9.2.1
-
cpe:2.3:a:linecorp:line:9.5.0
-
cpe:2.3:a:linecorp:line:9.5.1
-
cpe:2.3:a:linecorp:line:9.6.5
-
cpe:2.3:a:linecorp:line:9.7.0
-
cpe:2.3:a:linecorp:line:9.7.1
-
cpe:2.3:a:linecorp:line:9.8.0