LG Electronics

Products

ProductCVEsExploitedLatest
LG V60 Thin Q 5G(LMV600VM)9–Sep 27, 2023
LG LED Assistant6–Mar 25, 2024
SuperSign CMS3–Jun 20, 2024
LG Signage2–Feb 26, 2024
LG SuperSign CMS1–Jun 20, 2024
(LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup)1–Sep 14, 2020
SmartShare1–Jul 30, 2026
AC Smart II1–Sep 14, 2025

Exploited and recent CVEs

  • CVE-2026-15929 High 7.1 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1 0.3%
  • CVE-2025-10204 High 7.1 Unauth Admin Reset Password on AC Smart II 0.5%
  • CVE-2024-6179 Medium 4.8 XSS vulnerability in LG SuperSign CMS 0.3%
  • CVE-2024-6178 Medium 4.8 XSS vulnerability in LG SuperSign CMS 0.3%
  • CVE-2024-6177 Medium 4.8 XSS vulnerability in LG SuperSign CMS 0.3%
  • CVE-2024-6176 Medium 4.8 Port scanning vulnerability in LG SuperSign CMS 0.2%
  • CVE-2024-2863 Medium 5.3 Path traversal via file upload on LG LED Assistant 64.0%
  • CVE-2024-2862 Critical 9.1 Password reset vulnerability without authorization on LG LED Assistant 51.0%
  • CVE-2024-1886 Low 3.0 Absolute path traversal attack on LG Signage 0.8%
  • CVE-2024-1885 Medium 6.3 Remote Code Execution attack on LG Signage 0.9%
  • CVE-2023-44129 Low 3.6 Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity 0.1%
  • CVE-2023-44128 Medium 5.0 LGInstallService - Deletion of arbitrary files with system privilege <0.1%
  • CVE-2023-44127 Low 3.6 Call management - Implicit activity intents disclose contact details and phone numbers 0.1%
  • CVE-2023-44126 Low 3.6 Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts 0.1%
  • CVE-2023-44125 Medium 6.1 Personalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking 0.1%
  • CVE-2023-44124 Medium 6.1 Screen recording - Theft of arbitrary files with system privilege <0.1%
  • CVE-2023-44123 Medium 6.1 Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking 0.1%
  • CVE-2023-44122 Medium 6.1 LockScreenSettings - Theft arbitrary files with system privilege 0.1%
  • CVE-2023-44121 Medium 5.0 LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere 0.1%
  • CVE-2023-4616 High 7.5 thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 1.6%
  • CVE-2023-4615 High 7.5 updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 1.6%
  • CVE-2023-4614 Critical 9.8 setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 2.5%
  • CVE-2023-4613 Critical 9.8 Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 2.5%
  • CVE-2020-7807 Medium 5.6 DLL Hijacking Vulnerabilities During Installation of LG Electronics Software 0.2%