Huawei Harmonyos vulnerabilities
1,133 known vulnerabilities affecting huawei/harmonyos.
Total CVEs
1,133
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL138HIGH542MEDIUM412LOW41
Vulnerabilities
Page 51 of 57
CVE-2025-58276P4MEDIUMCVSS 5.5v2.0.0v3.0.0+5 more2025-09-05
CVE-2025-58276 [MEDIUM] CWE-264 CVE-2025-58276: Permission verification vulnerability in the home screen module Impact: Successful exploitation of t
Permission verification vulnerability in the home screen module
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-58298P4MEDIUMCVSS 5.5v5.0.1v5.1.02025-10-11
CVE-2025-58298 [MEDIUM] CWE-121 CVE-2025-58298: Data processing error vulnerability in the package management module. Successful exploitation of thi
Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-58307P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-11-28
CVE-2025-58307 [MEDIUM] CWE-416 CVE-2025-58307: UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this
UAF vulnerability in the screen recording framework module.
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2026-24930P4MEDIUMCVSS 5.5v5.1.0v6.0.02026-02-06
CVE-2026-24930 [MEDIUM] CWE-362 CVE-2026-24930: UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulner
UAF concurrency vulnerability in the graphics module.
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-58303P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-11-28
CVE-2025-58303 [MEDIUM] CWE-362 CVE-2025-58303: UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this
UAF vulnerability in the screen recording framework module.
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2026-28537P4MEDIUMCVSS 5.5v6.0.02026-03-05
CVE-2026-28537 [MEDIUM] CWE-415 CVE-2026-28537: Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerabilit
Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-58316P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-11-28
CVE-2025-58316 [MEDIUM] CWE-362 CVE-2025-58316: DoS vulnerability in the video-related system service module. Impact: Successful exploitation of thi
DoS vulnerability in the video-related system service module.
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-64313P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-11-28
CVE-2025-64313 [MEDIUM] CWE-362 CVE-2025-64313: Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this
Denial of service (DoS) vulnerability in the office service.
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2026-34857P4MEDIUMCVSS 5.5v5.1.0v5.1.1+1 more2026-04-13
CVE-2026-34857 [MEDIUM] CWE-362 CVE-2026-34857: UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability
UAF vulnerability in the communication module.
Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-66332P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-12-08
CVE-2025-66332 [MEDIUM] CWE-494 CVE-2025-66332: Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-66333P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-12-08
CVE-2025-66333 [MEDIUM] CWE-494 CVE-2025-66333: Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-66331P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-12-08
CVE-2025-66331 [MEDIUM] CWE-494 CVE-2025-66331: Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2025-66334P4MEDIUMCVSS 5.5v5.0.1v5.1.0+1 more2025-12-08
CVE-2025-66334 [MEDIUM] CWE-494 CVE-2025-66334: Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
nvd
CVE-2026-41984P4MEDIUMCVSS 5.2v6.1.02026-06-09
CVE-2026-41984 [MEDIUM] CWE-284 CVE-2026-41984: UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerab
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
nvd
CVE-2026-41985P4MEDIUMCVSS 5.1v6.1.02026-06-09
CVE-2026-41985 [MEDIUM] CWE-284 CVE-2026-41985: UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerab
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
nvd
CVE-2026-49309P4MEDIUMCVSS 4.8v4.3.3v4.3.1+3 more2026-09-09
CVE-2026-49309 [MEDIUM] CWE-264 CVE-2026-49309: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vul
Permission control vulnerability in the Settings module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
nvd
CVE-2022-31758P4MEDIUMCVSS 4.7v2.02022-06-13
CVE-2022-31758 [MEDIUM] CWE-362 CVE-2022-31758: The kernel module has the race condition vulnerability. Successful exploitation of this vulnerabilit
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
nvd
CVE-2023-52544P4MEDIUMCVSS 4.3v2.0.0v2.1.0+3 more2024-04-08
CVE-2023-52544 [MEDIUM] CWE-22 CVE-2023-52544: Vulnerability of file path verification being bypassed in the email module. Impact: Successful explo
Vulnerability of file path verification being bypassed in the email module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
nvd
CVE-2022-31751P4MEDIUMCVSS 5.5v2.02022-06-13
CVE-2022-31751 [MEDIUM] CVE-2022-31751: The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability m
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
nvd
CVE-2024-32995P4MEDIUMCVSS 5.5v2.0.0v2.1.0+4 more2024-05-14
CVE-2024-32995 [MEDIUM] CWE-248 CVE-2024-32995: Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vuln
Denial of service (DoS) vulnerability in the AMS module
Impact: Successful exploitation of this vulnerability will affect availability.
nvd