LG Electronics
24 CVEs across 9 LG Electronics products. Browse LG Electronics vulnerabilities, severities, and proof-of-concept exploits.
LG Electronics products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15929 | | 2026-07-30 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This iss… | |
CVE-2025-10204 | | 2025-09-14 | A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization. This page contains a hidden form for resetting the adm… | |
CVE-2024-6179 | Medium | 6.1 | 2024-06-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This i… |
CVE-2024-6178 | Medium | 6.1 | 2024-06-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This i… |
CVE-2024-6177 | Medium | 6.1 | 2024-06-20 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS… |
CVE-2024-6176 | | 2024-06-20 | Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS… | |
CVE-2024-2863 | Medium | 5.3 | 2024-03-25 | This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant. |
CVE-2024-2862 | Critical | 9.1 | 2024-03-25 | This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant. |
CVE-2024-1886 | Low | 3.0 | 2024-02-26 | This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage. |
CVE-2024-1885 | Medium | 6.3 | 2024-02-26 | This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage. |
CVE-2023-44129 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.an… |
CVE-2023-44128 | Medium | 5.0 | 2023-09-27 | he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.Ins… |
CVE-2023-44127 | Low | 3.6 | 2023-09-27 | he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all thi… |
CVE-2023-44126 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensit… |
CVE-2023-44125 | Medium | 6.1 | 2023-09-27 | The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files… |
CVE-2023-44124 | Medium | 6.1 | 2023-09-27 | The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools… |
CVE-2023-44123 | Medium | 6.1 | 2023-09-27 | The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with… |
CVE-2023-44122 | Medium | 6.1 | 2023-09-27 | The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreens… |
CVE-2023-44121 | Medium | 5.0 | 2023-09-27 | The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This… |
CVE-2023-4616 | High | 7.5 | 2023-09-04 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to e… |
CVE-2023-4615 | High | 7.5 | 2023-09-04 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to e… |
CVE-2023-4614 | Critical | 9.8 | 2023-09-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit t… |
CVE-2023-4613 | Critical | 9.8 | 2023-09-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit t… |
CVE-2020-7807 | Medium | 5.6 | 2020-09-14 | A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a… |