LG Electronics vulnerabilities
We track 9 vulnerabilities in LG Electronics products across 4 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2026.
Latest LG Electronics vulnerabilities
- 7.1 High severity
SmartShare: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier v
- 7.1 High severity
AC Smart II: Missing Authentication for Critical Functionality
A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization. This page contains a hidden form for resetting the administrator password. The attacker can manipulate the page using developer tools to display and use th
- 7.8 High severity
LG V60 Thin Q 5G(LMV600VM): Improper Authorization
The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service ("com.lge.abba") app. The attacker's app, if it ha
- 7.8 High severity
LG V60 Thin Q 5G(LMV600VM): Improper Authorization
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app. The attacker's app, if it had ac
- 7.8 High severity
LG V60 Thin Q 5G(LMV600VM): Exposure of Resource to Wrong Sphere
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launche
- 7.5 High severity
LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue res
- 7.5 High severity
LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The
- 9.8 Critical severity
LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The
- 9.8 Critical severity
LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue resul