LG Electronics
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LG V60 Thin Q 5G(LMV600VM) | 9 | – | Sep 27, 2023 |
| LG LED Assistant | 6 | – | Mar 25, 2024 |
| SuperSign CMS | 3 | – | Jun 20, 2024 |
| LG Signage | 2 | – | Feb 26, 2024 |
| LG SuperSign CMS | 1 | – | Jun 20, 2024 |
| (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) | 1 | – | Sep 14, 2020 |
| SmartShare | 1 | – | Jul 30, 2026 |
| AC Smart II | 1 | – | Sep 14, 2025 |
Exploited and recent CVEs
- CVE-2026-15929 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1 0.3%
- CVE-2025-10204 Unauth Admin Reset Password on AC Smart II 0.5%
- CVE-2024-6179 XSS vulnerability in LG SuperSign CMS 0.3%
- CVE-2024-6178 XSS vulnerability in LG SuperSign CMS 0.3%
- CVE-2024-6177 XSS vulnerability in LG SuperSign CMS 0.3%
- CVE-2024-6176 Port scanning vulnerability in LG SuperSign CMS 0.2%
- CVE-2024-2863 Path traversal via file upload on LG LED Assistant 64.0%
- CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant 51.0%
- CVE-2024-1886 Absolute path traversal attack on LG Signage 0.8%
- CVE-2024-1885 Remote Code Execution attack on LG Signage 0.9%
- CVE-2023-44129 Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity 0.1%
- CVE-2023-44128 LGInstallService - Deletion of arbitrary files with system privilege <0.1%
- CVE-2023-44127 Call management - Implicit activity intents disclose contact details and phone numbers 0.1%
- CVE-2023-44126 Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts 0.1%
- CVE-2023-44125 Personalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking 0.1%
- CVE-2023-44124 Screen recording - Theft of arbitrary files with system privilege <0.1%
- CVE-2023-44123 Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking 0.1%
- CVE-2023-44122 LockScreenSettings - Theft arbitrary files with system privilege 0.1%
- CVE-2023-44121 LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere 0.1%
- CVE-2023-4616 thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 1.6%
- CVE-2023-4615 updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 1.6%
- CVE-2023-4614 setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 2.5%
- CVE-2023-4613 Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability 2.5%
- CVE-2020-7807 DLL Hijacking Vulnerabilities During Installation of LG Electronics Software 0.2%