LGE

Latest CVEs · RSS

• CVE-2026-15929 2026-07-30 · CVSS 7.1
  Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issu
• CVE-2025-10538 2025-10-01 · CVSS 8.8
  An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to cam
• CVE-2025-10204 2025-09-14 · CVSS 7.1
  A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization. This page contains a hidden form for resetting the admi
• CVE-2025-7742 2025-07-24 · CVSS 8.3
  An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devi
• CVE-2024-6179 2024-06-20 · CVSS 4.8
  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This is
• CVE-2024-6178 2024-06-20 · CVSS 4.8
  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This is
• CVE-2024-6177 2024-06-20 · CVSS 4.8
  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. 
• CVE-2024-6176 2024-06-20 · CVSS 4.8
  Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS:
• CVE-2024-2863 2024-03-25 · CVSS 5.3
  This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.
• CVE-2024-2862 2024-03-25 · CVSS 9.1
  This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.
• CVE-2024-1886 2024-02-26 · CVSS 3.0
  This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
• CVE-2024-1885 2024-02-26 · CVSS 6.3
  This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.
• CVE-2023-44129 2023-09-27 · CVSS 3.6
  The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.and
• CVE-2023-44128 2023-09-27 · CVSS 5.0
  he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.Inst
• CVE-2023-44127 2023-09-27 · CVSS 3.6
  he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all thir
• CVE-2023-44126 2023-09-27 · CVSS 3.6
  The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensiti
• CVE-2023-44125 2023-09-27 · CVSS 6.1
  The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files
• CVE-2023-44124 2023-09-27 · CVSS 6.1
  The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/
• CVE-2023-44123 2023-09-27 · CVSS 6.1
  The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with
• CVE-2023-44122 2023-09-27 · CVSS 6.1
  The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreense
• CVE-2023-44121 2023-09-27 · CVSS 5.0
  The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This
• CVE-2023-4616 2023-09-04 · CVSS 7.5
  This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to ex
• CVE-2023-4615 2023-09-04 · CVSS 7.5
  This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to ex
• CVE-2023-4614 2023-09-04 · CVSS 9.8
  This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit th
• CVE-2023-4613 2023-09-04 · CVSS 9.8
  This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit th