What losing security updates actually means
"Supported" and "unsupported" on this site refer specifically to whether a model is still receiving platform-version updates — not whether it's been personally tested for open vulnerabilities. Those are different questions, and conflating them understates the honest "we don't know" and overstates the honest "this is old."
The specific vulnerabilities described further down were found in webOS. Samsung's platform, Tizen, is different software with its own history and its own update policy (Samsung has separately committed to seven years of updates on TVs from 2024 onward). Vizio's SmartCast platform has no equally clear public update-support commitment that could be found — see each model's own page for what's actually confirmed about its update status, brand by brand.
What a security update is actually for
Every piece of connected software accumulates newly discovered vulnerabilities over time — bugs nobody knew about at launch that a researcher or attacker finds later. A security update patches the specific ones that have been found and reported. It's not a general health check; it's closing specific, identified holes. A device that stops receiving updates doesn't develop new holes faster, but every hole found from that point forward stays open, indefinitely, because nothing is coming to close it.
What was actually found in webOS
This isn't hypothetical for LG specifically. Independent security researchers working with the 2026 Gamers Nexus / Level1Techs investigation reported finding remote-code-execution vulnerabilities in webOS's network-facing services directly to LG. Here's the honest state of that claim, quoting Malwarebytes' coverage of it directly: "The researchers also reported remote-code-execution vulnerabilities to LG. They have not disclosed full details while the responsible disclosure process is ongoing." No CVE number, no confirmation of a patch, and no technical specifics are public as of this writing — the researchers are following standard responsible-disclosure practice, giving LG time to fix it before publishing exploit details. That means this is a credible, reported finding, not a confirmed-and-fixed (or confirmed-and-ignored) one.
What "unsupported" means in practice
If your model page shows "Unsupported," it means LG has stopped shipping that model platform-version updates — confirmed the way every claim on this site is, per-model, with a source. It does not mean a specific exploit is known to be sitting on your exact TV right now. What it does mean: if one is found next year, targeting exactly the vulnerability class described above or something new, there's no mechanism left to patch it. The absence of a known active exploit today isn't the same as a guarantee of safety — it's the absence of anyone still being obligated to look.
What actually helps
You can't patch a vulnerability LG isn't fixing. What you can do is limit what an exploited TV could actually reach — which is the main reason to give it a network of its own. See putting a smart TV on its own network; isolating an unsupported device matters more, not less, than isolating a currently-patched one.