CVE-2022-44549

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...

CVE-2022-44561

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

CVE-2022-44549

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...

CVE-2022-44561

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

Denial of service

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

Design/Logic Flaw

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

CVE-2022-44561

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

PT-2022-27247 · Unknown · Preset Launcher Module

Name of the Vulnerable Software and Affected Versions: Preset launcher module affected versions not specified Description: The preset launcher module has a permission verification issue. This allows unauthorized apps to add arbitrary widgets and shortcuts without any interaction. Recommendations:...

CVE-2022-44549

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

CVE-2022-44561

CVE-2022-44561 involves a permission verification flaw in the preset launcher module that allows unauthorized apps to add arbitrary widgets and shortcuts without user interaction. Public sources (NVD/Red Hat/CVE lists) describe a HIGH severity (I=HIGH) with no interaction required. Connected docu...

CVE-2022-44553

CVE-2022-44553 affects the HiView module in HarmonyOS. Root cause: the HiView module does not filter third‑party apps when invoking the system provider, enabling potential abuse. Impact: successful exploitation may cause third‑party apps to start periodically. CVSSv3.1 base score 5.3 (I: Low, A: ...

CVE-2022-44549

CVE-2022-44549 concerns Huawei HarmonyOS’ LBS module, specifically a vulnerability in the geofencing API access. The issue allows third‑party apps to access geofencing APIs without authorization, compromising user confidentiality. The NVD and related entries show a CVSS v3.1 base score of 7.5 (HI...

CVE-2022-44553

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

CVE-2022-44561: Incorrect Default Permissions

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

CVE-2022-44553: Improper Input Validation

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically...

PT-2022-5646

Name of the Vulnerable Software and Affected Versions Microsoft Office versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft Office and Microsoft 365 Apps f...

PT-2022-27238 · Hiview · Hiview

Name of the Vulnerable Software and Affected Versions: HiView module affected versions not specified Description: The HiView module has a vulnerability where it fails to filter out third-party apps when invoking the system provider. This could lead to third-party apps starting periodically if the...