Harmonyos Security Vulnerabilities and Issues — Page 2 of Harmonyos CVE List

Lucene search

HuaweiHarmonyos

187 matches found

CVE•added 2024/04/08 9:15 a.m.•50 views

CVE-2023-52550

Vulnerability of data verification errors in the kernel module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.7AI score0.00059EPSS

CVE•added 2024/04/08 10:15 a.m.•50 views

CVE-2024-27895

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS6.8AI score0.00051EPSS

CVE•added 2024/04/07 8:15 a.m.•50 views

CVE-2024-30414

Command injection vulnerability in the AccountManager module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.2AI score0.00511EPSS

CVE•added 2024/06/14 8:15 a.m.•50 views

CVE-2024-36499

Vulnerability of unauthorized screenshot capturing in the WMS moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

6.8CVSS6.9AI score0.00028EPSS

CVE•added 2024/12/12 12:15 p.m.•50 views

CVE-2024-54101

Denial of service (DoS) vulnerability in the installation moduleImpact: Successful exploitation of this vulnerability will affect availability.

6.2CVSS6.9AI score0.00032EPSS

CVE•added 2024/04/08 9:15 a.m.•49 views

CVE-2023-52539

Permission verification vulnerability in the Settings module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.00051EPSS

CVE•added 2024/04/08 9:15 a.m.•49 views

CVE-2023-52540

Vulnerability of improper authentication in the Iaware module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS7AI score0.00075EPSS

CVE•added 2024/04/08 9:15 a.m.•49 views

CVE-2023-52542

Permission verification vulnerability in the system module.Impact: Successful exploitation of this vulnerability will affect availability.

6.5CVSS6.8AI score0.00049EPSS

CVE•added 2024/04/07 9:15 a.m.•49 views

CVE-2023-52715

The SystemUI module has a vulnerability in permission management.Impact: Successful exploitation of this vulnerability may affect availability.

7.5CVSS6.8AI score0.00094EPSS

CVE•added 2024/04/07 9:15 a.m.•49 views

CVE-2024-30417

Path traversal vulnerability in the Bluetooth-based sharing module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.0014EPSS

CVE•added 2024/12/12 12:15 p.m.•49 views

CVE-2024-54107

Read/Write vulnerability in the image decoding moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS7.1AI score0.0007EPSS

CVE•added 2024/06/14 8:15 a.m.•49 views

CVE-2024-5465

Function vulnerabilities in the Calendar moduleImpact: Successful exploitation of this vulnerability will affect availability.

5.9CVSS7.2AI score0.00029EPSS

CVE•added 2024/04/07 9:15 a.m.•48 views

CVE-2023-52717

Permission verification vulnerability in the lock screen module.Impact: Successful exploitation of this vulnerability will affect availability.

5.3CVSS6.8AI score0.00063EPSS

CVE•added 2024/06/14 8:15 a.m.•48 views

CVE-2024-36503

Memory management vulnerability in the Gralloc moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.3CVSS7.1AI score0.00053EPSS

CVE•added 2024/08/08 10:15 a.m.•48 views

CVE-2024-42037

Vulnerability of uncaught exceptions in the Graphics moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

9.3CVSS6.9AI score0.00009EPSS

CVE•added 2024/08/08 10:15 a.m.•48 views

CVE-2024-42038

Vulnerability of PIN enhancement failures in the screen lock moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

8.8CVSS6.9AI score0.00022EPSS

CVE•added 2024/12/12 12:15 p.m.•48 views

CVE-2024-54102

Race condition vulnerability in the DDR moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

6.1CVSS6.9AI score0.0002EPSS

CVE•added 2024/04/08 9:15 a.m.•47 views

CVE-2023-52388

Permission control vulnerability in the clock module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00062EPSS

CVE•added 2024/07/25 12:15 p.m.•47 views

CVE-2024-39672

Memory request logic vulnerability in the memory module.Impact: Successful exploitation of this vulnerability will affect integrity and availability.

8.4CVSS7.2AI score0.00033EPSS

CVE•added 2024/08/08 10:15 a.m.•47 views

CVE-2024-42035

Permission control vulnerability in the App Multiplier moduleImpact:Successful exploitation of this vulnerability may affect functionality and confidentiality.

8.4CVSS7AI score0.00022EPSS

CVE•added 2024/09/27 11:15 a.m.•47 views

CVE-2024-47293

Out-of-bounds write vulnerability in the HAL-WIFI moduleImpact: Successful exploitation of this vulnerability may affect availability.

7.5CVSS7AI score0.00038EPSS

CVE•added 2024/12/28 7:15 a.m.•46 views

CVE-2021-22484

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory (OOM).

7.5CVSS7.1AI score0.00099EPSS

CVE•added 2024/04/08 9:15 a.m.•46 views

CVE-2023-52544

Vulnerability of file path verification being bypassed in the email module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

4.3CVSS6.8AI score0.00059EPSS

CVE•added 2024/04/08 9:15 a.m.•46 views

CVE-2023-52552

Input verification vulnerability in the power module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00072EPSS

CVE•added 2024/06/14 8:15 a.m.•46 views

CVE-2024-36502

Out-of-bounds read vulnerability in the audio moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.9CVSS7AI score0.00033EPSS

CVE•added 2024/08/08 10:15 a.m.•46 views

CVE-2024-42036

Access permission verification vulnerability in the Notepad moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.9AI score0.00042EPSS

CVE•added 2024/09/04 3:15 a.m.•46 views

CVE-2024-8298

Memory request vulnerability in the memory management moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

6.2CVSS7.2AI score0.00022EPSS

CVE•added 2024/12/28 7:15 a.m.•45 views

CVE-2021-37000

Some Huawei wearables have a permission management vulnerability.

7.8CVSS7.2AI score0.00015EPSS

CVE•added 2024/04/08 10:15 a.m.•45 views

CVE-2023-52385

Out-of-bounds write vulnerability in the RSMC module.Impact: Successful exploitation of this vulnerability will affect availability.

6.2CVSS6.8AI score0.00019EPSS

CVE•added 2024/04/08 9:15 a.m.•45 views

CVE-2023-52546

Vulnerability of package name verification being bypassed in the Calendar app.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS6.8AI score0.00015EPSS

CVE•added 2024/04/07 9:15 a.m.•45 views

CVE-2024-30418

Vulnerability of insufficient permission verification in the app management module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.8AI score0.00072EPSS

CVE•added 2024/07/25 12:15 p.m.•45 views

CVE-2024-39671

Access control vulnerability in the security verification module.Impact: Successful exploitation of this vulnerability may affect service confidentiality.

9.3CVSS7.2AI score0.00022EPSS

CVE•added 2024/09/04 3:15 a.m.•45 views

CVE-2024-45443

Directory traversal vulnerability in the cust moduleImpact: Successful exploitation of this vulnerability will affect availability and confidentiality.

9.1CVSS7AI score0.00139EPSS

CVE•added 2024/09/04 3:15 a.m.•45 views

CVE-2024-45444

Access permission verification vulnerability in the WMS moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

5.5CVSS7.1AI score0.00023EPSS

CVE•added 2024/04/07 9:15 a.m.•44 views

CVE-2024-30416

Use After Free (UAF) vulnerability in the underlying driver module.Impact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS6.9AI score0.00084EPSS

CVE•added 2024/08/08 10:15 a.m.•44 views

CVE-2024-42033

Access control vulnerability in the security verification modulempact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

7.1CVSS7AI score0.00013EPSS

CVE•added 2024/09/04 3:15 a.m.•44 views

CVE-2024-45446

Access permission verification vulnerability in the camera driver moduleImpact: Successful exploitation of this vulnerability will affect availability.

5.5CVSS7.1AI score0.00021EPSS

CVE•added 2024/12/12 12:15 p.m.•44 views

CVE-2024-54106

Null pointer dereference vulnerability in the image decoding moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS7.1AI score0.00043EPSS

CVE•added 2024/12/12 12:15 p.m.•44 views

CVE-2024-54111

Read/Write vulnerability in the image decoding moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS5.6AI score0.00019EPSS

CVE•added 2024/12/12 12:15 p.m.•44 views

CVE-2024-54112

Cross-process screen stack vulnerability in the UIExtension moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS5.5AI score0.00026EPSS

CVE•added 2024/02/18 7:15 a.m.•43 views

CVE-2022-48621

Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7AI score0.00042EPSS

CVE•added 2024/06/14 8:15 a.m.•43 views

CVE-2024-36500

Privilege escalation vulnerability in the AMS moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

7.8CVSS7.2AI score0.00047EPSS

CVE•added 2024/09/27 11:15 a.m.•43 views

CVE-2024-47290

Input validation vulnerability in the USB service moduleImpact: Successful exploitation of this vulnerability may affect availability.

5.5CVSS5.5AI score0.00012EPSS

CVE•added 2024/11/05 10:21 a.m.•43 views

CVE-2024-51525

Permission control vulnerability in the clipboard moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

6.2CVSS6.5AI score0.0002EPSS

CVE•added 2024/12/12 12:15 p.m.•43 views

CVE-2024-54096

Vulnerability of improper access control in the MTP moduleImpact: Successful exploitation of this vulnerability may affect integrity and accuracy.

5.5CVSS5.3AI score0.00009EPSS

CVE•added 2024/12/12 12:15 p.m.•43 views

CVE-2024-54098

Service logic error vulnerability in the system service moduleImpact: Successful exploitation of this vulnerability may affect service integrity.

8.5CVSS8.4AI score0.00058EPSS

CVE•added 2024/12/12 12:15 p.m.•43 views

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH moduleImpact: Successful exploitation of this vulnerability will affect availability.

7.5CVSS4.8AI score0.00024EPSS

CVE•added 2024/05/14 3:37 p.m.•42 views

CVE-2024-32997

Race condition vulnerability in the binder driver moduleImpact: Successful exploitation of this vulnerability will affect availability.

8.4CVSS6.8AI score0.00034EPSS

CVE•added 2024/07/25 12:15 p.m.•42 views

CVE-2024-39674

Plaintext vulnerability in the Gallery search module.Impact: Successful exploitation of this vulnerability will affect availability.

6.2CVSS7.1AI score0.00013EPSS

CVE•added 2024/09/27 11:15 a.m.•42 views

CVE-2024-47292

Path traversal vulnerability in the Bluetooth moduleImpact: Successful exploitation of this vulnerability may affect service confidentiality.

6.2CVSS7AI score0.00039EPSS

Total number of security vulnerabilities187