CVE-2026-90860

Canva Mobile App for HarmonyOS prior to v1.15.1 failed to restrict HTTP headers returned to an external origin running in a privileged WebView . The underlying cause is an insufficient origin check on WebView responses, allowing a threat actor with control of the WebView to read a user's session ...

EUVD-2026-83843

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...

ReArk

ReArk English | 简体中文 ReArk 是一款面向 HarmonyOS 和 Android 应用的桌面逆向与 AI 辅助分析工具。支持打开鸿蒙 .hap、.app、.abc 文件和 Android .apk、.aab 包，在同一个工作区中查看代码、资源、元数据及应用运行行为。 结合静态分析、真机交互和 ReArk Agent，可用于研究应用逻辑、安全分析和 CTF 解题。 安装与运行平台 请前往最新发布页，下载适合电脑系统的安装包。历史版本和更新说明见全部发布版本。 系统| 版本要求| 点击直接下载 ---|---|--- Windows| Windows 10+ x64|...

CVE-2026-43499-NAM-AL00

CVE-2026-43499 — GhostLock auf Huawei Nova 9 NAM-AL00 Sicherheitsforschung: Bestätigung auf dem Gerät und Exploit-Analyse von CVE-2026-43499 GhostLock auf Huawei Nova 9 NAM-AL00, Snapdragon 778G/SM7325, HarmonyOS 4.2.0.185, Kernel 5.4.86-qgki. Zusammenfassung CVE-2026-43499 ist ein...

Huawei HarmonyOS Image Codec Module Out-of-Bounds Read Vulnerability

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. The Huawei HarmonyOS’s media coding and decoding module contains a out-of-bounds read vulnerability, which allows attackers to...

Huawei HarmonyOS Image Codec Module Out-of-Bounds Reading Vulnerability (CNVD-2026-29425)

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. The Huawei HarmonyOS’s media coding and decoding module contains a out-of-bounds read vulnerability, which allows attackers to explo...

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2026-29729)

Huawei HarmonyOS is a distributed operating system developed by Huawei for various scenarios. Version 6.1.0 of Huawei HarmonyOS contains a buffer overflow vulnerability. This vulnerability arises from failing to correctly validate the input range when reading image data, resulting in the reading ...

Huawei HarmonyOS information leakage vulnerability (CNVD-2026-28948)

Huawei HarmonyOS is a distributed operating system platform developed by Huawei, a Chinese company. Huawei HarmonyOS has a vulnerability related to information leakage, which stems from incorrect permission control settings. Attackers can exploit this vulnerability to compromise the confidentiali...

Huawei HarmonyOS Image Codec Module Out-of-Bounds Reading Vulnerability

Huawei HarmonyOS is an operating system. The image codec module of Huawei HarmonyOS has a out-of-bounds read vulnerability, which stems from insufficient validation of input data. Attackers can exploit this vulnerability to compromise the confidentiality of services...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a logic bypass in the file system. This vulnerability may...

Huawei EMUI和Huawei HarmonyOS 授权问题漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei. Huawei EMUI is a mobile operating system developed based on Android. Huawei HarmonyOS is an operating system that provides a full-scenario distributed operating system based on a microkernel. There are authorization...

Huawei EMUI和Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS EMUI is a microkernel-based distributed operating system developed by Huawei, offering seamless collaboration across devices. There are input validation vulnerabilities in Huawei EMUI and Huawei HarmonyOS. These vulnerabilities stem from the log service’s failure to properly hand...

Huawei HarmonyOS 信息泄露漏洞

Huawei HarmonyOS is a distributed operating system developed by Huawei. It is primarily used for intelligent terminal devices, providing cross-device collaboration and a unified experience. The Huawei HarmonyOS file preview module has a permission control vulnerability. This vulnerability stems...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is a distributed operating system designed for various scenarios, primarily providing features such as cross-device collaboration, intelligent connectivity, and secure operation environments. The print module of Huawei HarmonyOS has a permission control vulnerability, which stems...

Huawei HarmonyOS 授权问题漏洞

Huawei HarmonyOS is an operating system developed by Huawei Technologies Co., Ltd. It is a full-scenario distributed operating system based on a microkernel architecture. There are vulnerabilities related to authorization in HUAWEI HarmonyOS. These vulnerabilities stem from the permission control...

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is a distributed operating system developed by Huawei Corporation. It is designed for comprehensive scenarios and primarily offers features such as cross-device collaboration, security protection, and intelligent services. There is an access control vulnerability in the package...

Huawei HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is a distributed operating system designed for various scenarios, supporting collaborative interactions between multiple devices and intelligent interactions. There is a race condition vulnerability in the IPC module of Huawei HarmonyOS. This vulnerability stems from the improper...

Huawei HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is a distributed operating system developed independently by Huawei. It primarily offers seamless collaboration across devices, intelligent experiences in various scenarios, and security features. Huawei HarmonyOS has a denial-of-service vulnerability. This vulnerability stems fr...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is a distributed operating system designed for various scenarios, primarily providing seamless collaboration across devices. The IPC module of Huawei HarmonyOS has a out-of-bounds write vulnerability. This vulnerability arises from improper handling of certain input data. Attacke...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. The network management module of Huawei HarmonyOS has a vulnerability related to improper permission management. This vulnerability...