Harmonyos@4.0.0 Security Vulnerabilities and Issues — Harmonyos@4.0.0 CVE List

Lucene search

HuaweiHarmonyos4.0.0

66 matches found

CVE•added 2023/10/11 1:15 p.m.•64 views

CVE-2023-44116

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.

9.8CVSS9.2AI score0.00074EPSS

CVE•added 2023/09/25 1:15 p.m.•60 views

CVE-2023-41293

Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.0015EPSS

CVE•added 2023/11/08 10:15 a.m.•55 views

CVE-2023-46762

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 10:15 a.m.•55 views

CVE-2023-46764

Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously.

5.3CVSS5.2AI score0.00079EPSS

CVE•added 2023/09/25 12:15 p.m.•54 views

CVE-2023-41299

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/10/11 1:15 p.m.•54 views

CVE-2023-44108

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

7.5CVSS7.4AI score0.00062EPSS

CVE•added 2023/11/08 10:15 a.m.•52 views

CVE-2023-46766

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00175EPSS

CVE•added 2023/10/11 12:15 p.m.•49 views

CVE-2023-44104

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00069EPSS

CVE•added 2023/09/25 12:15 p.m.•48 views

CVE-2023-41295

Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim.

5.3CVSS5.2AI score0.00086EPSS

CVE•added 2023/09/25 1:15 p.m.•48 views

CVE-2023-41302

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.

7.5CVSS7.4AI score0.00149EPSS

CVE•added 2023/09/27 3:19 p.m.•48 views

CVE-2023-41305

Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.4AI score0.00096EPSS

CVE•added 2023/10/11 12:15 p.m.•48 views

CVE-2023-44110

Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.

4.3CVSS4.7AI score0.00022EPSS

CVE•added 2023/10/11 12:15 p.m.•48 views

CVE-2023-44111

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.6AI score0.0007EPSS

CVE•added 2023/11/08 10:15 a.m.•48 views

CVE-2023-46760

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 3:15 a.m.•48 views

CVE-2023-46770

Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones.

7.5CVSS7.5AI score0.00134EPSS

CVE•added 2023/11/08 11:15 a.m.•47 views

CVE-2023-46757

The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.4AI score0.0015EPSS

CVE•added 2023/10/11 1:15 p.m.•46 views

CVE-2023-44114

Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00081EPSS

CVE•added 2023/11/08 11:15 a.m.•46 views

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.

5.3CVSS5.2AI score0.00086EPSS

CVE•added 2023/11/08 10:15 a.m.•46 views

CVE-2023-46761

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/09/25 1:15 p.m.•45 views

CVE-2023-41300

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 11:15 a.m.•45 views

CVE-2023-46758

Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.

7.5CVSS7.5AI score0.00114EPSS

CVE•added 2023/10/11 11:15 a.m.•44 views

CVE-2023-44094

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.

5.3CVSS5.2AI score0.00032EPSS

CVE•added 2023/11/08 10:15 a.m.•44 views

CVE-2023-46767

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

7.5CVSS7.4AI score0.00175EPSS

CVE•added 2023/09/25 11:15 a.m.•43 views

CVE-2023-39409

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 9:15 a.m.•43 views

CVE-2023-44098

Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.4AI score0.0007EPSS

CVE•added 2023/11/08 9:15 a.m.•43 views

CVE-2023-46771

Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.0015EPSS

CVE•added 2023/10/11 12:15 p.m.•42 views

CVE-2023-44101

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.00071EPSS

CVE•added 2023/10/11 1:15 p.m.•42 views

CVE-2023-44105

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.

9.8CVSS9.3AI score0.00074EPSS

CVE•added 2023/11/08 10:15 a.m.•42 views

CVE-2023-46763

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously.

5.3CVSS5.2AI score0.00107EPSS

CVE•added 2023/09/25 9:15 a.m.•41 views

CVE-2023-39408

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

7.5CVSS7.4AI score0.00072EPSS

CVE•added 2023/09/27 3:19 p.m.•41 views

CVE-2023-41309

Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.

7.5CVSS7.5AI score0.00128EPSS

CVE•added 2023/10/11 12:15 p.m.•41 views

CVE-2023-44106

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.

9.8CVSS9.2AI score0.00084EPSS

CVE•added 2023/10/11 11:15 a.m.•41 views

CVE-2023-44109

Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00157EPSS

CVE•added 2023/11/08 10:15 a.m.•41 views

CVE-2023-46765

Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.

7.5CVSS7.4AI score0.00175EPSS

CVE•added 2023/09/27 3:19 p.m.•40 views

CVE-2023-41312

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically.

5.3CVSS5.2AI score0.00117EPSS

CVE•added 2023/11/08 11:15 a.m.•40 views

CVE-2023-46759

Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00128EPSS

CVE•added 2023/11/08 10:15 a.m.•40 views

CVE-2023-46774

Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2023/11/08 3:15 a.m.•38 views

CVE-2023-5801

Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality.

9.1CVSS9AI score0.00056EPSS

CVE•added 2023/10/11 12:15 p.m.•37 views

CVE-2023-44102

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.

5.3CVSS5.2AI score0.00027EPSS

CVE•added 2023/10/11 12:15 p.m.•37 views

CVE-2023-44103

Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.4AI score0.00081EPSS

CVE•added 2023/11/08 3:15 a.m.•37 views

CVE-2023-46769

Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.

7.5CVSS7.5AI score0.00134EPSS

CVE•added 2023/12/06 9:15 a.m.•36 views

CVE-2023-49246

Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00095EPSS

CVE•added 2023/10/11 12:15 p.m.•35 views

CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.

5.3CVSS5.2AI score0.00057EPSS

CVE•added 2023/09/27 3:19 p.m.•35 views

CVE-2023-41308

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.

7.5CVSS7.5AI score0.00112EPSS

CVE•added 2023/12/06 9:15 a.m.•35 views

CVE-2023-44099

Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption.

7.5CVSS7.3AI score0.00099EPSS

CVE•added 2023/12/06 9:15 a.m.•35 views

CVE-2023-49240

Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.5AI score0.00095EPSS

CVE•added 2023/12/06 9:15 a.m.•35 views

CVE-2023-49243

Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.3AI score0.00111EPSS

CVE•added 2023/10/11 11:15 a.m.•34 views

CVE-2023-44096

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.6AI score0.0007EPSS

CVE•added 2023/12/06 9:15 a.m.•34 views

CVE-2023-6273

Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerability may cause features to perform abnormally.

5.3CVSS5.3AI score0.00037EPSS

CVE•added 2023/11/08 4:15 a.m.•33 views

CVE-2023-44115

Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

7.5CVSS7.4AI score0.0015EPSS

Total number of security vulnerabilities66