EM
Product
EMUI
829
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 147High 353Medium 0Low 0
Watch
Add EMUI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41293 | 7.5 | Sep 25 | Data security classification vulnerability in the DDMP module Affected: 13.0.0 |
| CVE-2023-41299 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 13.0.0 |
| CVE-2023-41298 | 7.5 | Sep 25 | Vulnerability of permission control in the window module Affected: 12.0.1; 13.0.0 |
| CVE-2023-39409 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-39408 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-39406 | 7.5 | Aug 13 | Permission control vulnerability in the XLayout component Affected: 13.0.0 |
| CVE-2023-39404 | 7.5 | Aug 13 | Vulnerability of input parameter verification in certain APIs in the window management module Affected: 13.0.0 |
| CVE-2023-39397 | 7.5 | Aug 13 | Input parameter verification vulnerability in the communication system Affected: 12.0.1; 13.0.0 |
| CVE-2023-39395 | 7.5 | Aug 13 | Mismatch vulnerability in the serialization process in the communication system Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-39394 | 7.5 | Aug 13 | Vulnerability of API privilege escalation in the wifienhance module Affected: 12.0.1; 13.0.0 |
| CVE-2023-39391 | 7.5 | Aug 13 | Vulnerability of system file information leakage in the USB Service module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-39390 | 7.5 | Aug 13 | Vulnerability of input parameter verification in certain APIs in the window management module Affected: 13.0.0 |
| CVE-2023-39386 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the PMS module Affected: 12.0.0; 13.0.0 |
| CVE-2023-39396 | 7.5 | Aug 13 | Deserialization vulnerability in the input module Affected: 13.0.0 |
| CVE-2023-39393 | 7.5 | Aug 13 | Vulnerability of insecure signatures in the ServiceWifiResources module Affected: 12.0.1; 13.0.0 |
| CVE-2023-39392 | 7.5 | Aug 13 | Vulnerability of insecure signatures in the OsuLogin module Affected: 12.0.1; 13.0.0 |
| CVE-2023-39389 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the PMS module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-39388 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the PMS module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-39384 | 7.5 | Aug 13 | Vulnerability of incomplete permission verification in the input method module Affected: 12.0.1; 13.0.0 |
| CVE-2023-39383 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the AMS module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-39382 | 7.5 | Aug 13 | Input verification vulnerability in the audio module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-39381 | 7.5 | Aug 13 | Input verification vulnerability in the storage module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-39380 | 7.5 | Aug 13 | Permission control vulnerability in the audio module Affected: 13.0.0 |
| CVE-2023-37241 | 7.5 | Jul 6 | Input verification vulnerability in the WMS API Affected: 13.0.0 |
| CVE-2023-37239 | 7.5 | Jul 6 | Format string vulnerability in the distributed file system Affected: 12.0.1; 13.0.0 |
| CVE-2023-34164 | 7.5 | Jul 6 | Vulnerability of incomplete input parameter verification in the communication framework module Affected: 13.0.0 |
| CVE-2023-1695 | 7.5 | Jul 6 | Vulnerability of failures to capture exceptions in the communication framework Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-1691 | 7.5 | Jul 6 | Vulnerability of failures to capture exceptions in the communication framework Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48520 | 7.5 | Jul 6 | Unauthorized access vulnerability in the SystemUI module Affected: 12.0.0; 12.0.1 |
| CVE-2022-48519 | 7.5 | Jul 6 | Unauthorized access vulnerability in the SystemUI module Affected: 12.0.0; 12.0.1 |
| CVE-2022-48517 | 7.5 | Jul 6 | Unauthorized service access vulnerability in the DSoftBus module Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48516 | 7.5 | Jul 6 | Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48515 | 7.5 | Jul 6 | Vulnerability of inappropriate permission control in Nearby Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-48508 | 7.5 | Jul 6 | Inappropriate authorization vulnerability in the system apps Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48507 | 7.5 | Jul 6 | Vulnerability of identity verification being bypassed in the storage module Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2021-46892 | 7.5 | Jul 6 | Encryption bypass vulnerability in Maintenance mode Affected: 12.0.0 |
| CVE-2021-46893 | 7.5 | Jul 5 | Vulnerability of unstrict data verification and parameter check Affected: 12.0.0 |
| CVE-2023-34166 | 7.5 | Jun 19 | Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-34163 | 7.5 | Jun 19 | Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-34162 | 7.5 | Jun 19 | Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail Affected: 13.0.0 |
| CVE-2023-34161 | 7.5 | Jun 19 | nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-34155 | 7.5 | Jun 19 | Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability Affected: 13.0.0 |
| CVE-2022-48501 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48500 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48499 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48498 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48497 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
| CVE-2022-48496 | 7.5 | Jun 19 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48494 | 7.5 | Jun 19 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2022-48493 | 7.5 | Jun 19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability Affected: 12.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)