VendorsHuaweiharmonyos4.0.0
Vulnerabilities

Huawei Harmonyos 4.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

266CVEs
CVE-2024-32991
Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-05-11 · Analyzed
9.8EPSS 0.006
CVE-2023-46773
Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation.
Published 2023-12-06 · Modified
9.8EPSS 0.005
CVE-2023-52370
Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.
Published 2024-02-18 · Analyzed
9.8EPSS 0.005
CVE-2023-52103
Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read.
Published 2024-01-16 · Modified
9.8EPSS 0.005
CVE-2023-52381
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Published 2024-02-18 · Analyzed
9.8EPSS 0.004
CVE-2023-44106
API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2023-10-11 · Modified
9.8EPSS 0.004
CVE-2023-44105
Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2023-10-11 · Modified
9.8EPSS 0.004
CVE-2023-44116
Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.
Published 2023-10-11 · Modified
9.8EPSS 0.004
CVE-2024-57959
Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2025-02-06 · Analyzed
9.8EPSS 0.002
CVE-2024-42037
Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-08-08 · Analyzed
9.3EPSS 0.001
CVE-2024-39671
Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-07-25 · Modified
9.3EPSS 0.001
CVE-2024-45443
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Published 2024-09-04 · Analyzed
9.1EPSS 0.005
CVE-2023-5801
Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality.
Published 2023-11-08 · Modified
9.1EPSS 0.004
CVE-2023-52369
Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.
Published 2024-02-18 · Modified
9.1EPSS 0.004
CVE-2023-52101
Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity.
Published 2024-01-16 · Modified
9.1EPSS 0.004
CVE-2023-41296
Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality.
Published 2023-09-25 · Modified
9.1EPSS 0.004
CVE-2024-30415
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-07 · Analyzed
9.1EPSS 0.004
CVE-2023-52106
Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.
Published 2024-01-16 · Modified
9.1EPSS 0.003
CVE-2023-52538
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-04-08 · Modified
9.1EPSS 0.003
CVE-2024-57958
Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2025-02-06 · Analyzed
9.1EPSS 0.002
CVE-2025-31170
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
Published 2025-04-07 · Analyzed
9.1EPSS 0.002
CVE-2024-58124
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
Published 2025-04-07 · Analyzed
9.1EPSS 0.002
CVE-2024-58125
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
Published 2025-04-07 · Analyzed
9.1EPSS 0.002
CVE-2024-58126
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
Published 2025-04-07 · Analyzed
9.1EPSS 0.002
CVE-2024-58127
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
Published 2025-04-07 · Analyzed
9.1EPSS 0.002
CVE-2024-42038
Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Published 2024-08-08 · Modified
8.8EPSS 0.001
CVE-2024-54098
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.
Published 2024-12-12 · Analyzed
8.5EPSS 0.002
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.
Published 2025-04-07 · Analyzed
8.4EPSS 0.002
CVE-2024-32997
Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-05-11 · Analyzed
8.4EPSS 0.001
CVE-2024-42035
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.
Published 2024-08-08 · Modified
8.4EPSS 0.001
CVE-2024-39672
Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.
Published 2024-07-25 · Modified
8.4EPSS 0.001
CVE-2024-58044
Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability.
Published 2025-03-04 · Analyzed
8.4EPSS 0.001
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-11-28 · Analyzed
8.4EPSS 0.001
CVE-2024-36502
Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability.
Published 2024-06-14 · Modified
7.9EPSS 0.001
CVE-2024-56447
Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-01-08 · Analyzed
7.8EPSS 0.003
CVE-2024-36500
Privilege escalation vulnerability in the AMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2024-06-14 · Modified
7.8EPSS 0.001
CVE-2023-52365
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.
Published 2024-02-18 · Modified
7.7EPSS 0.003
CVE-2026-34853
Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.
Published 2026-04-13 · Analyzed
7.7EPSS 0.002
CVE-2024-57960
Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Published 2025-02-06 · Analyzed
7.7EPSS 0.002
CVE-2023-52713
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Published 2024-04-07 · Analyzed
7.7EPSS 0.001
1 / 7Next →