Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37862)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability. This vulnerability stems from a flaw in the window module’s permission management. Attackers can exploit this vulnerabilit...

CVE-2026-49312

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49312

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49312

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-74598

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49312

CVE-2026-49312 is a permission control vulnerability in the window module of Huawei consumer devices, as indicated by the September 2026 security bulletins for both desktops and laptops. Successful exploitation may affect service confidentiality . The assigned CVSS 3.1 score is 4.0 (MEDIUM) with ...

CVE-2026-49312: Undefined Security Weakness

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-88795

Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS Window Module Double Release Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A double-release vulnerability exists in the Huawei HarmonyOS window module, which can be exploited by an attacker to cause availability to be compromised...

CVE-2026-28537

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-9798

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537

Summary: CVE-2026-28537 is a double free vulnerability in the window module with impact on availability. The CVSS 3.1 vector indicates local access required, high attack complexity, no privileges required, no user interaction, and an overall Medium severity (CVSS base score 5.1). No exploitation ...

CVE-2026-28537

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-23414

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28537: Double Free

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A double-release vulnerability exists in the Huawei HarmonyOS window module, which can be exploited by an attacker to cause availability to be compromised...