Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-27896 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity. | ||
| CVE-2024-27895 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality. | ||
| CVE-2023-52386 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52552 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52550 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52549 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52546 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52545 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52541 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52540 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52539 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2023-52537 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52388 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52359 | Hig | 0.49 | 7.5 | 0.00 | Apr 8, 2024 | Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-30418 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-30417 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-30416 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52716 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52715 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2023-52714 | Hig | 0.49 | 7.5 | 0.00 | Apr 7, 2024 | Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
- risk 0.49cvss 7.5epss 0.00
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
- risk 0.49cvss 7.5epss 0.00
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.49cvss 7.5epss 0.00
Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.00
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.49cvss 7.5epss 0.00
Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Page 12 of 54