Read the docs

LG Electronics

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

LG Electronics records in CISA KEV

No LG Electronics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

27 records

Priority HIGH 84

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.63999 Published 2024-03-25 No fix listed CWE-35
TI-2024-01754 CVE-2024-1885 · GHSA-j98f-j6g4-3jp3

Remote Code Execution attack on LG Signage

Priority MEDIUM 45

This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00932 Published 2024-02-26 No fix listed CWE-94
Priority LOW 39

This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00797 Published 2024-02-26 No fix listed CWE-35
Priority LOW 33

The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service ("com.lge.…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00137 Published 2023-09-27 No fix listed CWE-285
Priority LOW 33

The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00145 Published 2023-09-27 No fix listed CWE-285
Priority LOW 33

The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00104 Published 2023-09-27 No fix listed CWE-927
TI-2025-09368 CVE-2025-10204 · GHSA-pcwr-jxjv-7h3c

Unauth Admin Reset Password on AC Smart II

Priority LOW 32

A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00483 Published 2025-09-14 No fix listed CWE-306
TI-2026-13343 CVE-2026-15929 · GHSA-g2xh-vghf-6g4h

SQL injection in LG Electronics SmartShare

Priority LOW 31

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00275 Published 2026-07-30 No fix listed CWE-89
Priority LOW 26

The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00098 Published 2023-09-27 No fix listed CWE-927
Priority LOW 24

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00133 Published 2023-09-27 No fix listed CWE-925
Priority LOW 24

A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants.

CVSS 3.1MEDIUM 5.6 Local High privileges User interaction EPSS 0.00189 Published 2020-09-14 No fix listed CWE-353
TI-2024-05728 CVE-2024-6179 · GHSA-9wjg-c56j-xw9f

XSS vulnerability in LG SuperSign CMS

Priority LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79
TI-2024-05727 CVE-2024-6178 · GHSA-85x5-7hjw-hj56

XSS vulnerability in LG SuperSign CMS

Priority LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79
TI-2024-05726 CVE-2024-6177 · GHSA-v29v-mr8q-2gqr

XSS vulnerability in LG SuperSign CMS

Priority LOW 22

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79
Priority LOW 21

Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before < 4.3.1.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00228 Published 2024-06-20 Fixed in < 4.3.1 CWE-770
Load more
Open these records in search →