VendorsHuaweiharmonyos3.0.0
Vulnerabilities

Huawei HarmonyOS 3.0.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

318CVEs
CVE-2022-44557
The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality.
Published 2022-11-09 · Modified
7.5EPSS 0.005
CVE-2022-48351
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-48352
Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-48357
Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2022-48606
Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.
Published 2023-09-26 · Modified
7.5EPSS 0.005
CVE-2022-48346
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2023-44108
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-10-11 · Modified
7.5EPSS 0.005
CVE-2023-44095
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.
Published 2023-10-11 · Modified
7.5EPSS 0.005
CVE-2022-48359
The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.005
CVE-2023-41305
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-09-26 · Modified
7.5EPSS 0.005
CVE-2023-37239
Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.
Published 2023-07-06 · Modified
7.5EPSS 0.005
CVE-2023-39409
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.005
CVE-2023-41299
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.005
CVE-2023-41300
Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.005
CVE-2023-39382
Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39386
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39388
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39389
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39390
Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39395
Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39397
Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39404
Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39406
Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-39408
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
Published 2023-09-25 · Modified
7.5EPSS 0.004
CVE-2023-1696
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.
Published 2023-05-20 · Modified
7.5EPSS 0.004
CVE-2023-34164
Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-37241
Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-07-06 · Modified
7.5EPSS 0.004
CVE-2023-39381
Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.
Published 2023-08-13 · Modified
7.5EPSS 0.004
CVE-2023-49241
API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49242
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49245
Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49244
Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49243
Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-44111
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-10-11 · Modified
7.5EPSS 0.004
CVE-2024-30417
Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-04-07 · Modified
7.5EPSS 0.004
CVE-2022-48347
The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.004
CVE-2023-26549
The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality.
Published 2023-03-27 · Modified
7.5EPSS 0.004
CVE-2023-44113
Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49247
Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
CVE-2023-49246
Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.
Published 2023-12-06 · Modified
7.5EPSS 0.004
← Prev3 / 8Next →