Harmonyos (Huawei) - vulnerabilities (CVEs)

1111 CVEs, 0 in the last 30 days, 41 known versions, newest CVE from 2026-09-24. Vendor: Huawei.

CVEs of Harmonyos

• CVE-2026-81645 - CVSS 5.9 (medium), 2026-09-24: Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49313 - CVSS 5.5 (medium), 2026-09-09: Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-49309 - CVSS 4.8 (medium), 2026-09-09: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41987 - CVSS 6.2 (medium), 2026-09-09: Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49315 - CVSS 7.1 (high), 2026-09-09: DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-81647 - CVSS 5.3 (medium), 2026-09-09: Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-81646 - CVSS 5.9 (medium), 2026-09-09: Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-81644 - CVSS 4.3 (medium), 2026-09-09: DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49312 - CVSS 4 (medium), 2026-09-09: Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-49310 - CVSS 8.6 (high), 2026-09-09: Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-49314 - CVSS 7.3 (high), 2026-09-09: OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49311 - CVSS 6.2 (medium), 2026-09-09: Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49303 - CVSS 5.1 (medium), 2026-08-17: Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49301 - CVSS 6.2 (medium), 2026-08-17: Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-49305 - CVSS 6.2 (medium), 2026-08-17: Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49308 - CVSS 5.5 (medium), 2026-08-17: Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-49306 - CVSS 3.3 (low), 2026-08-17: UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49304 - CVSS 6.2 (medium), 2026-08-17: Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49302 - CVSS 6.2 (medium), 2026-08-17: Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58561 - CVSS 4 (medium), 2026-08-17: Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-58560 - CVSS 4 (medium), 2026-08-17: Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-49307 - CVSS 6.2 (medium), 2026-08-17: Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58557 - CVSS 4.8 (medium), 2026-07-15: Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-58554 - CVSS 6.6 (medium), 2026-07-15: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58555 - CVSS 6.6 (medium), 2026-07-15: Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-58553 - CVSS 4 (medium), 2026-07-15: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58552 - CVSS 5.1 (medium), 2026-07-15: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58551 - CVSS 5.1 (medium), 2026-07-15: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58550 - CVSS 4 (medium), 2026-07-15: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-58549 - CVSS 4 (medium), 2026-07-15: Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41986 - CVSS 2.4 (low), 2026-06-09: Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41982 - CVSS 6.4 (medium), 2026-06-09: Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41985 - CVSS 5.1 (medium), 2026-06-09: UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
• CVE-2026-41981 - CVSS 5.3 (medium), 2026-06-09: Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41984 - CVSS 5.2 (medium), 2026-06-09: UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
• CVE-2026-41983 - CVSS 4.3 (medium), 2026-06-09: Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41972 - CVSS 5.4 (medium), 2026-06-09: Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41976 - CVSS 6.6 (medium), 2026-06-09: Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41974 - CVSS 3.6 (low), 2026-06-09: Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41973 - CVSS 5.9 (medium), 2026-06-09: Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41977 - CVSS 5 (medium), 2026-06-09: DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41978 - CVSS 4.4 (medium), 2026-06-09: Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41980 - CVSS 5.5 (medium), 2026-06-09: Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41979 - CVSS 5.5 (medium), 2026-06-09: Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.
• CVE-2026-41975 - CVSS 6.3 (medium), 2026-06-09: Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
• CVE-2026-41970 - CVSS 6.8 (medium), 2026-05-15: Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41966 - CVSS 5.6 (medium), 2026-05-15: Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41969 - CVSS 6.2 (medium), 2026-05-15: Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41965 - CVSS 5.6 (medium), 2026-05-15: Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41968 - CVSS 5.9 (medium), 2026-05-15: Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41971 - CVSS 5.5 (medium), 2026-05-15: Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-41964 - CVSS 8.4 (high), 2026-05-15: Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41967 - CVSS 5.9 (medium), 2026-05-15: Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41963 - CVSS 2.8 (low), 2026-05-15: Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41962 - CVSS 3.6 (low), 2026-05-15: Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service…
• CVE-2026-41961 - CVSS 5.9 (medium), 2026-05-15: Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-41960 - CVSS 5.8 (medium), 2026-05-15: Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34866 - CVSS 5.1 (medium), 2026-04-13: Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
• CVE-2026-34865 - CVSS 10 (critical), 2026-04-13: Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
• CVE-2026-34864 - CVSS 6.8 (medium), 2026-04-13: Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34863 - CVSS 6.7 (medium), 2026-04-13: Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34862 - CVSS 6.3 (medium), 2026-04-13: Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34861 - CVSS 6.3 (medium), 2026-04-13: Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34855 - CVSS 5.7 (medium), 2026-04-13: Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
• CVE-2026-34859 - CVSS 7.1 (high), 2026-04-13: UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
• CVE-2026-34854 - CVSS 7.1 (high), 2026-04-13: UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
• CVE-2026-34858 - CVSS 4.1 (medium), 2026-04-13: UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34849 - CVSS 4.7 (medium), 2026-04-13: UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34857 - CVSS 5.5 (medium), 2026-04-13: UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34867 - CVSS 5.6 (medium), 2026-04-13: Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34853 - CVSS 7.7 (high), 2026-04-13: Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34860 - CVSS 6.5 (medium), 2026-04-13: Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
• CVE-2026-34856 - CVSS 7.5 (high), 2026-04-13: UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34852 - CVSS 6.5 (medium), 2026-04-13: Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34851 - CVSS 7.5 (high), 2026-04-13: Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-34850 - CVSS 5.9 (medium), 2026-04-13: Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28553 - CVSS 7.5 (high), 2026-04-13: Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service…
• CVE-2026-28549 - CVSS 6.6 (medium), 2026-03-05: Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28542 - CVSS 7.3 (high), 2026-03-05: Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28548 - CVSS 7.1 (high), 2026-03-05: Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-28547 - CVSS 6.8 (medium), 2026-03-05: Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28551 - CVSS 4.7 (medium), 2026-03-05: Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28546 - CVSS 5.9 (medium), 2026-03-05: Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28545 - CVSS 5.9 (medium), 2026-03-05: Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28544 - CVSS 6.2 (medium), 2026-03-05: Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28552 - CVSS 7.5 (high), 2026-03-05: Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28543 - CVSS 4.7 (medium), 2026-03-05: Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28550 - CVSS 4.7 (medium), 2026-03-05: Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28538 - CVSS 5.9 (medium), 2026-03-05: Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28541 - CVSS 5.5 (medium), 2026-03-05: Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28537 - CVSS 5.5 (medium), 2026-03-05: Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-28540 - CVSS 4 (medium), 2026-03-05: Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-28539 - CVSS 6.2 (medium), 2026-03-05: Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2025-66319 - CVSS 5.5 (medium), 2026-03-05: Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.
• CVE-2026-28536 - CVSS 9.6 (critical), 2026-03-05: Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and…
• CVE-2026-24920 - CVSS 6.2 (medium), 2026-02-06: Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-24928 - CVSS 5.8 (medium), 2026-02-06: Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-24927 - CVSS 5.5 (medium), 2026-02-06: Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.
• CVE-2026-24924 - CVSS 6.1 (medium), 2026-02-06: Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
• CVE-2026-24929 - CVSS 5.9 (medium), 2026-02-06: Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.