Huawei HarmonyOS home screen module privilege checksum vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checksum vulnerability exists in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to compromise usability...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-32322

In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recording capabilities due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2025-26428

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-0077

In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26421

In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in coach-improve-screen (npm)

The package coach-improve-screen was found to contain malicious code...

Malicious code in cast-younger-screen (npm)

The package cast-younger-screen was found to contain malicious code...

MAL-2025-43711 Malicious code in cast-younger-screen (npm)

The package cast-younger-screen was found to contain malicious code...

MAL-2025-43841 Malicious code in coach-improve-screen (npm)

The package coach-improve-screen was found to contain malicious code...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276

Huawei HarmonyOS home screen module is cited in CNVD-2025-20906 as having a privilege checksum vulnerability. The CVE-2025-58276 entry describes a permission verification issue with potential impact on availability. Connected documents do not provide concrete details on affected versions, root ca...

CVE-2025-58276

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58276: Undefined Security Weakness

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checksum vulnerability exists in the Huawei HarmonyOS home screen module, which can be exploited by an attacker to compromise usability...

PT-2025-36116

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A permission verification issue exists in the home screen module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about a newer...

ROS-20250905-03

A vulnerability in the socket.c component of the GNU Screen window manager is related to incorrect assignment of permissions for a critical resource. permissions for a critical resource. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service...

CVE-2025-22427

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...