EM
Product
EMUI
829
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 147High 353Medium 0Low 0
Watch
Add EMUI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42031 | 7.5 | Aug 8 | Access permission verification vulnerability in the Settings module Affected: 12.0.0; 13.0.0; 14.0.0 |
| CVE-2024-32992 | 7.5 | May 14 | Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability Affected: 12.0.0; 13.0.0; 14.0.0 |
| CVE-2024-32990 | 7.5 | May 14 | Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability Affected: 12.0.0; 13.0.0; 14.0.0 |
| CVE-2024-32989 | 7.5 | May 14 | Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability Affected: 13.0.0; 14.0.0 |
| CVE-2024-27897 | 7.5 | Apr 8 | Input verification vulnerability in the call module Affected: 12.0.0; 13.0.0 |
| CVE-2024-27896 | 7.5 | Apr 8 | Input verification vulnerability in the log module Affected: 13.0.0 |
| CVE-2023-52386 | 7.5 | Apr 8 | Out-of-bounds write vulnerability in the RSMC module Affected: 13.0.0 |
| CVE-2023-52552 | 7.5 | Apr 8 | Input verification vulnerability in the power module Affected: 13.0.0 |
| CVE-2023-52550 | 7.5 | Apr 8 | Vulnerability of data verification errors in the kernel module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52549 | 7.5 | Apr 8 | Vulnerability of data verification errors in the kernel module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52546 | 7.5 | Apr 8 | Vulnerability of package name verification being bypassed in the Calendar app Affected: 13.0.0 |
| CVE-2023-52545 | 7.5 | Apr 8 | Vulnerability of undefined permissions in the Calendar app Affected: 13.0.0 |
| CVE-2023-52541 | 7.5 | Apr 8 | Authentication vulnerability in the API for app pre-loading Affected: 12.0.0; 13.0.0 |
| CVE-2023-52540 | 7.5 | Apr 8 | Vulnerability of improper authentication in the Iaware module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52539 | 7.5 | Apr 8 | Permission verification vulnerability in the Settings module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52537 | 7.5 | Apr 8 | Vulnerability of package name verification being bypassed in the HwIms module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52388 | 7.5 | Apr 8 | Permission control vulnerability in the clock module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52359 | 7.5 | Apr 8 | Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module Affected: 12.0.0; 13.0.0 |
| CVE-2024-30418 | 7.5 | Apr 7 | Vulnerability of insufficient permission verification in the app management module Affected: 12.0.0; 13.0.0 |
| CVE-2024-30417 | 7.5 | Apr 7 | Path traversal vulnerability in the Bluetooth-based sharing module Affected: 12.0.0; 13.0.0 |
| CVE-2024-30416 | 7.5 | Apr 7 | Use After Free (UAF) vulnerability in the underlying driver module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52716 | 7.5 | Apr 7 | Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module Affected: 12.0.0; 13.0.0 |
| CVE-2023-52714 | 7.5 | Apr 7 | Vulnerability of defects introduced in the design process in the hwnff module Affected: 12.0.0; 13.0.0 |
| CVE-2024-30414 | 7.5 | Apr 7 | Command injection vulnerability in the AccountManager module Affected: 13.0.0 |
| CVE-2024-30413 | 7.5 | Apr 7 | Vulnerability of improper permission control in the window management module Affected: 13.0.0 |
| CVE-2023-52379 | 7.5 | Feb 18 | Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0.0; 13.0.0 |
| CVE-2022-48621 | 7.5 | Feb 18 | Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0.0; 13.0.0 |
| CVE-2023-52376 | 7.5 | Feb 18 | Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0.0; 13.0.0 |
| CVE-2023-52375 | 7.5 | Feb 18 | Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability Affected: 12.0.0; 13.0.0 |
| CVE-2023-52374 | 7.5 | Feb 18 | Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 13.0.0 |
| CVE-2023-52373 | 7.5 | Feb 18 | Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing Affected: 12.0.0; 13.0.0 |
| CVE-2023-52372 | 7.5 | Feb 18 | Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability Affected: 12.0.0; 13.0.0 |
| CVE-2023-52366 | 7.5 | Feb 18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 12.0.0; 13.0.0 |
| CVE-2023-52387 | 7.5 | Feb 18 | Resource reuse vulnerability in the GPU module Affected: 13.0.0 |
| CVE-2023-52362 | 7.5 | Feb 18 | Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability Affected: 13.0.0 |
| CVE-2023-52360 | 7.5 | Feb 18 | Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity Affected: 12.0.0 |
| CVE-2023-52357 | 7.5 | Feb 18 | Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability Affected: 12.0.0; 13.0.0 |
| CVE-2023-52097 | 7.5 | Feb 18 | Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0.0; 13.0.0 |
| CVE-2023-52104 | 7.5 | Jan 16 | Vulnerability of parameters being not verified in the WMS module Affected: 13.0.0 |
| CVE-2023-52102 | 7.5 | Jan 16 | Vulnerability of parameters being not verified in the WMS module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52099 | 7.5 | Jan 16 | Vulnerability of foreground service restrictions being bypassed in the NMS module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52116 | 7.5 | Jan 16 | Permission management vulnerability in the multi-screen interaction module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52114 | 7.5 | Jan 16 | Data confidentiality vulnerability in the ScreenReader module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52108 | 7.5 | Jan 16 | Vulnerability of process priorities being raised in the ActivityManagerService module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52107 | 7.5 | Jan 16 | Vulnerability of permissions being not strictly verified in the WMS module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52098 | 7.5 | Jan 16 | Denial of Service (DoS) vulnerability in the DMS module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52113 | 7.5 | Jan 16 | launchAnyWhere vulnerability in the ActivityManagerService module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-52111 | 7.5 | Jan 16 | Authorization vulnerability in the BootLoader module Affected: 13.0.0 |
| CVE-2023-52109 | 7.5 | Jan 16 | Vulnerability of trust relationships being inaccurate in distributed scenarios Affected: 13.0.0 |
| CVE-2023-4566 | 7.5 | Jan 16 | Vulnerability of trust relationships being inaccurate in distributed scenarios Affected: 13.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
