What’s Vulnerable › Vulnerabilities

CVE-2022-23731

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-11 · updated 2026-06-17
• Weakness: CWE-264

Description

V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.

Affected products

• LG webOS: from 4.0

References

• https://lgsecurity.lge.com/bulletins/tv
• https://lgsecurity.lge.com/bulletins/tv

Get alerted when CVE-2022-23731 or the next vulnerability affects your stack