CVE-2025-48911 — Incorrect Privilege Assignment in Huawei Harmonyos

CWE-266 — Incorrect Privilege Assignment3 documents3 sources
Severity
8.2HIGHNVD
EPSS
0.0%
top 88.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Harmonyos
Timeline
PublishedJun 6

Description

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.8

Affected Packages2 packages

▶CVEListV5huawei/harmonyos5.0.0
▶NVDhuawei/harmonyos5.0.1, 5.0.2+1

🔴Vulnerability Details

2
CVEList
CVE-2025-48911: Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availabili↗2025-06-06
▶
GHSA
GHSA-28wf-q2m6-rjgv: Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availabili↗2025-06-06
▶
CVE-2025-48911 — Incorrect Privilege Assignment | cvebase