VendorsHuaweiharmonyosall versions
Vulnerabilities

Huawei Harmonyos

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1050CVEs
CVE-2023-41293
Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-09-25 · Modified
7.5EPSS 0.004
CVE-2023-41298
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-09-25 · Modified
7.5EPSS 0.004
CVE-2022-48350
The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.004
CVE-2022-48360
The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.004
CVE-2025-31174
Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-04-07 · Analyzed
7.5EPSS 0.004
CVE-2021-46868
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Published 2023-01-06 · Modified
7.5EPSS 0.004
CVE-2022-46321
The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality.
Published 2022-12-20 · Modified
7.5EPSS 0.004
CVE-2022-46328
Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Published 2022-12-20 · Modified
7.5EPSS 0.004
CVE-2022-41599
The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerability may affect data confidentiality.
Published 2022-12-20 · Modified
7.5EPSS 0.004
CVE-2022-48297
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2022-48298
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2022-48516
Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-39383
Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39391
Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2021-46867
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Published 2023-01-06 · Modified
7.5EPSS 0.004
CVE-2023-44095
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-52540
Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Modified
7.5EPSS 0.004
CVE-2023-44108
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2022-46310
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality.
Published 2022-12-20 · Modified
7.5EPSS 0.004
CVE-2022-48514
The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-1691
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-1695
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2022-41596
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.
Published 2022-12-20 · Modified
7.5EPSS 0.004
CVE-2022-48507
Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-52110
The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-52115
The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-52108
Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-52113
launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-52098
Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2024-30416
Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-07 · Analyzed
7.5EPSS 0.004
CVE-2023-52386
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Modified
7.5EPSS 0.004
CVE-2023-52552
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Analyzed
7.5EPSS 0.004
CVE-2023-52366
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2024-02-18 · Analyzed
7.5EPSS 0.004
CVE-2023-52372
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.
Published 2024-02-18 · Analyzed
7.5EPSS 0.004
CVE-2023-52100
The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affect availability.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-1693
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-05-20 · Modified
7.5EPSS 0.004
CVE-2023-1694
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-05-20 · Modified
7.5EPSS 0.004
CVE-2022-48286
The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2022-48302
The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality.
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2023-1692
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-05-20 · Modified
7.5EPSS 0.004
← Prev13 / 27Next →