Harmonyos
by Huawei
CVEs (1,079)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-51522 | Med | 0.40 | 6.2 | 0.00 | Nov 5, 2024 | Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-51516 | Med | 0.40 | 6.2 | 0.00 | Nov 5, 2024 | Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally. | ||
| CVE-2024-51515 | Med | 0.40 | 6.2 | 0.00 | Nov 5, 2024 | Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-51512 | Med | 0.40 | 6.2 | 0.00 | Nov 5, 2024 | Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-51511 | Med | 0.40 | 6.2 | 0.00 | Nov 5, 2024 | Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2024-47292 | Med | 0.40 | 6.2 | 0.00 | Sep 27, 2024 | Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-8298 | Med | 0.40 | 6.2 | 0.00 | Sep 4, 2024 | Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-45443 | Med | 0.40 | 6.1 | 0.01 | Sep 4, 2024 | Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | ||
| CVE-2024-45441 | Med | 0.40 | 6.2 | 0.00 | Sep 4, 2024 | Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-42030 | Med | 0.40 | 6.2 | 0.00 | Aug 8, 2024 | Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality. | ||
| CVE-2024-39674 | Med | 0.40 | 6.2 | 0.00 | Jul 25, 2024 | Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-39670 | Med | 0.40 | 6.2 | 0.00 | Jul 25, 2024 | Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-32996 | Med | 0.40 | 6.2 | 0.00 | May 14, 2024 | Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-32995 | Med | 0.40 | 6.2 | 0.00 | May 14, 2024 | Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2024-32990 | Med | 0.40 | 6.1 | 0.00 | May 14, 2024 | Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52721 | Med | 0.40 | 6.2 | 0.00 | May 14, 2024 | The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. | ||
| CVE-2023-52385 | Med | 0.40 | 6.2 | 0.00 | Apr 8, 2024 | Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52543 | Med | 0.40 | 6.2 | 0.00 | Apr 8, 2024 | Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2023-52358 | Med | 0.40 | 6.2 | 0.00 | Feb 18, 2024 | Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability. | ||
| CVE-2026-24919 | Med | 0.39 | 6.0 | 0.00 | Feb 6, 2026 | Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. |
- risk 0.40cvss 6.2epss 0.00
Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally.
- risk 0.40cvss 6.2epss 0.00
Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.
- risk 0.40cvss 6.2epss 0.00
Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.1epss 0.01
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
- risk 0.40cvss 6.2epss 0.00
Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- risk 0.40cvss 6.2epss 0.00
Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.1epss 0.00
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.
- risk 0.40cvss 6.2epss 0.00
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.
- risk 0.40cvss 6.2epss 0.00
Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.
- risk 0.39cvss 6.0epss 0.00
Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.
Page 39 of 54