VendorsHuaweiharmonyosall versions
Vulnerabilities

Huawei Harmonyos

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1050CVEs
CVE-2022-48515
Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2026-28552
Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.
Published 2026-03-05 · Analyzed
7.5EPSS 0.004
CVE-2022-44561
The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction.
Published 2022-11-09 · Modified
7.5EPSS 0.004
CVE-2024-32990
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-05-11 · Analyzed
7.5EPSS 0.004
CVE-2023-44111
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2022-48287
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity.
Published 2023-02-09 · Modified
7.5EPSS 0.004
CVE-2024-58113
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
Published 2025-04-07 · Analyzed
7.5EPSS 0.004
CVE-2024-58112
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
Published 2025-04-07 · Analyzed
7.5EPSS 0.004
CVE-2024-58111
Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.
Published 2025-04-07 · Analyzed
7.5EPSS 0.004
CVE-2023-52537
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Analyzed
7.5EPSS 0.004
CVE-2024-58107
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.
Published 2025-04-07 · Analyzed
7.5EPSS 0.004
CVE-2023-52541
Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-08 · Analyzed
7.5EPSS 0.004
CVE-2023-44096
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-44097
Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-44114
Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-44100
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-44103
Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-44104
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2023-52116
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-52359
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Modified
7.5EPSS 0.004
CVE-2023-52388
Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Modified
7.5EPSS 0.004
CVE-2024-30418
Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-07 · Analyzed
7.5EPSS 0.004
CVE-2024-30413
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-07 · Modified
7.5EPSS 0.004
CVE-2023-52716
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-07 · Analyzed
7.5EPSS 0.004
CVE-2023-52545
Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Analyzed
7.5EPSS 0.004
CVE-2023-52362
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.
Published 2024-02-18 · Analyzed
7.5EPSS 0.004
CVE-2023-52715
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability.
Published 2024-04-07 · Modified
7.5EPSS 0.004
CVE-2023-52105
The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-44112
Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2024-01-16 · Modified
7.5EPSS 0.004
CVE-2023-44101
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.003
CVE-2021-46893
Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity.
Published 2023-07-05 · Modified
7.5EPSS 0.003
CVE-2023-39394
Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified.
Published 2023-08-13 · Modified
7.5EPSS 0.003
CVE-2022-46311
The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity.
Published 2022-12-20 · Modified
7.5EPSS 0.003
CVE-2023-52097
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-02-18 · Analyzed
7.5EPSS 0.003
CVE-2023-52102
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-01-16 · Modified
7.5EPSS 0.003
CVE-2023-52376
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-02-18 · Analyzed
7.5EPSS 0.003
CVE-2024-27897
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-08 · Analyzed
7.5EPSS 0.003
CVE-2023-52387
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-02-18 · Modified
7.5EPSS 0.003
CVE-2023-52714
Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-07 · Analyzed
7.5EPSS 0.003
CVE-2023-52549
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-08 · Analyzed
7.5EPSS 0.003
← Prev14 / 27Next →