EM
Product
EMUI
829
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 147High 353Medium 0Low 0
Watch
Add EMUI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49246 | 7.5 | Dec 6 | Unauthorized access vulnerability in the card management module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-49245 | 7.5 | Dec 6 | Unauthorized access vulnerability in the Huawei Share module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-49244 | 7.5 | Dec 6 | Permission management vulnerability in the multi-user module Affected: 13.0.0 |
| CVE-2023-49243 | 7.5 | Dec 6 | Vulnerability of unauthorized access to email attachments in the email module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-49242 | 7.5 | Dec 6 | Free broadcast vulnerability in the running management module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-49241 | 7.5 | Dec 6 | API permission control vulnerability in the network management module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-49240 | 7.5 | Dec 6 | Unauthorized access vulnerability in the launcher module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-49239 | 7.5 | Dec 6 | Unauthorized access vulnerability in the card management module Affected: 11.0.1; 12.0.0; 13.0.0 |
| CVE-2023-44113 | 7.5 | Dec 6 | Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module Affected: 13.0.0 |
| CVE-2023-44099 | 7.5 | Dec 6 | Vulnerability of data verification errors in the kernel module Affected: 12.0.0 |
| CVE-2023-46759 | 7.5 | Nov 8 | Permission control vulnerability in the call module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-46758 | 7.5 | Nov 8 | Permission management vulnerability in the multi-screen interaction module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-46774 | 7.5 | Nov 8 | Vulnerability of uncaught exceptions in the NFC module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-46772 | 7.5 | Nov 8 | Vulnerability of parameters being out of the value range in the QMI service module Affected: 11.0.1 |
| CVE-2023-46767 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 13.0.0 |
| CVE-2023-46766 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 13.0.0 |
| CVE-2023-46765 | 7.5 | Nov 8 | Vulnerability of uncaught exceptions in the NFC module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-46762 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 13.0.0 |
| CVE-2023-46761 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 13.0.0 |
| CVE-2023-46760 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 13.0.0 |
| CVE-2023-46771 | 7.5 | Nov 8 | Security vulnerability in the face unlock module Affected: 12.0.0; 13.0.0 |
| CVE-2023-44098 | 7.5 | Nov 8 | Vulnerability of missing encryption in the card management module Affected: 11.0.1; 12.0.1; 13.0.0 |
| CVE-2023-44115 | 7.5 | Nov 8 | Vulnerability of improper permission control in the Booster module Affected: 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-46770 | 7.5 | Nov 8 | Out-of-bounds vulnerability in the sensor module Affected: 12.0; 13.0.0 |
| CVE-2023-46769 | 7.5 | Nov 8 | Use-After-Free (UAF) vulnerability in the dubai module Affected: 13.0.0 |
| CVE-2023-46768 | 7.5 | Nov 8 | Multi-thread vulnerability in the idmap module Affected: 13.0.0 |
| CVE-2023-44119 | 7.5 | Oct 11 | Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-44114 | 7.5 | Oct 11 | Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 13.0.0 |
| CVE-2023-44108 | 7.5 | Oct 11 | Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart Affected: 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-44111 | 7.5 | Oct 11 | Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0; 12.0.1; 13.0.0 |
| CVE-2023-44104 | 7.5 | Oct 11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-44103 | 7.5 | Oct 11 | Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-44100 | 7.5 | Oct 11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-44097 | 7.5 | Oct 11 | Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0.1; 13.0.0 |
| CVE-2023-44095 | 7.5 | Oct 11 | Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash Affected: 12.0.1; 13.0.0 |
| CVE-2023-44109 | 7.5 | Oct 11 | Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0; 12.0.1; 13.0.0 |
| CVE-2023-44096 | 7.5 | Oct 11 | Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 12.0; 12.0.1; 13.0.0 |
| CVE-2023-44093 | 7.5 | Oct 11 | Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-41309 | 7.5 | Sep 27 | Permission control vulnerability in the MediaPlaybackController module Affected: 12.0; 12.0.1; 13.0.0 |
| CVE-2023-41308 | 7.5 | Sep 27 | Screenshot vulnerability in the input module Affected: 12.0; 12.0.1; 13.0.0 |
| CVE-2023-41307 | 7.5 | Sep 27 | Memory overwriting vulnerability in the security module Affected: 12.0; 13.0.0 |
| CVE-2023-41305 | 7.5 | Sep 27 | Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2022-48606 | 7.5 | Sep 27 | Stability-related vulnerability in the binder background management and control module Affected: 11.0.1; 12.0; 12.0.1; 13.0.0 |
| CVE-2023-41303 | 7.5 | Sep 25 | Command injection vulnerability in the distributed file system module Affected: 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-41302 | 7.5 | Sep 25 | Redirection permission verification vulnerability in the home screen module Affected: 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-41301 | 7.5 | Sep 25 | Vulnerability of unauthorized API access in the PMS module Affected: 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-41300 | 7.5 | Sep 25 | Vulnerability of parameters not being strictly verified in the PMS module Affected: 11.0.1; 12.0.0; 12.0.1; 13.0.0 |
| CVE-2023-41293 | 7.5 | Sep 25 | Data security classification vulnerability in the DDMP module Affected: 13.0.0 |
| CVE-2023-41299 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 13.0.0 |
| CVE-2023-41298 | 7.5 | Sep 25 | Vulnerability of permission control in the window module Affected: 12.0.1; 13.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
