VendorsHuaweiharmonyos3.0.0
Vulnerabilities

Huawei Harmonyos 3.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

318CVEs
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.
Published 2025-04-07 · Analyzed
8.4EPSS 0.002
CVE-2024-32997
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-05-11 · Analyzed
8.4EPSS 0.001
CVE-2024-58044
Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
Published 2025-03-04 · Analyzed
8.4EPSS 0.001
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-11-28 · Analyzed
8.4EPSS 0.001
CVE-2024-36502
Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-06-14 · Modified
7.9EPSS 0.001
CVE-2024-56447
Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-01-08 · Analyzed
7.8EPSS 0.003
CVE-2023-26547
The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation.
Published 2023-03-27 · Modified
7.8EPSS 0.002
CVE-2024-36500
Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-06-14 · Modified
7.8EPSS 0.001
CVE-2023-52365
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2024-02-18 · Modified
7.7EPSS 0.003
CVE-2024-57960
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-02-06 · Analyzed
7.7EPSS 0.002
CVE-2023-52713
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Published 2024-04-07 · Analyzed
7.7EPSS 0.001
CVE-2023-52367
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.
Published 2024-02-18 · Analyzed
7.7EPSS 0.001
CVE-2023-41303
Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
Published 2023-09-25 · Modified
7.5EPSS 0.007
CVE-2024-30414
Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-07 · Analyzed
7.5EPSS 0.007
CVE-2023-41307
Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.
Published 2023-09-26 · Modified
7.5EPSS 0.006
CVE-2021-46856
The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Published 2022-12-20 · Modified
7.5EPSS 0.006
CVE-2023-41309
Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.
Published 2023-09-26 · Modified
7.5EPSS 0.005
CVE-2024-32992
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-05-11 · Analyzed
7.5EPSS 0.005
CVE-2023-26548
The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availability.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2023-44099
Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption.
Published 2023-12-06 · Modified
7.5EPSS 0.005
CVE-2023-46769
Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46768
Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46767
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46770
Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46765
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46761
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46766
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46762
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46760
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-46774
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2023-41308
Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-09-26 · Modified
7.5EPSS 0.005
CVE-2022-41591
The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files.
Published 2022-12-20 · Modified
7.5EPSS 0.005
CVE-2023-39396
Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.
Published 2023-08-13 · Modified
7.5EPSS 0.005
CVE-2023-46758
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.
Published 2023-11-08 · Modified
7.5EPSS 0.005
CVE-2022-44556
Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.
Published 2022-11-08 · Modified
7.5EPSS 0.005
CVE-2022-48351
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-48352
Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-48357
Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-48346
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-44555
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable.
Published 2022-11-09 · Modified
7.5EPSS 0.005
← Prev2 / 8Next →