EM
Product
EMUI
831
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 148High 352Medium 0Low 0
Watch
Add EMUI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46312 | 7.5 | Dec 20 | The application management module has a vulnerability in permission verification Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-41599 | 7.5 | Dec 20 | The system service has a vulnerability that causes incorrect return values Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-41596 | 7.5 | Dec 20 | The system tool has inconsistent serialization and deserialization Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-41591 | 7.5 | Dec 20 | The backup module has a path traversal vulnerability Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2021-46856 | 7.5 | Dec 20 | The multi-screen collaboration module has a path traversal vulnerability Affected: 12.0.0; 12.0.1 |
| CVE-2022-44561 | 7.5 | Nov 9 | The preset launcher module has a permission verification vulnerability Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-44557 | 7.5 | Nov 9 | The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-44555 | 7.5 | Nov 9 | The DDMP/ODMF module has a service hijacking vulnerability Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-44554 | 7.5 | Nov 9 | The power module has a vulnerability in permission verification Affected: 12.0.0 |
| CVE-2022-44552 | 7.5 | Nov 9 | The lock screen module has defects introduced in the design process Affected: 11.0.1 |
| CVE-2022-44550 | 7.5 | Nov 9 | The graphics display module has a UAF vulnerability when traversing graphic layers Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-44549 | 7.5 | Nov 9 | The LBS module has a vulnerability in geofencing API access Affected: 11.0.1; 12.0.0; 12.0.1 |
| CVE-2022-44547 | 7.5 | Nov 9 | The Display Service module has a UAF vulnerability Affected: 12.0 |
| CVE-2022-44546 | 7.5 | Nov 9 | The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released Affected: 12.0 |
| CVE-2021-46852 | 7.5 | Nov 9 | The memory management module has the logic bypass vulnerability Affected: 12.0.0 |
| CVE-2022-44556 | 7.5 | Nov 8 | Missing parameter type validation in the DRM module Affected: 12.0.0 |
| CVE-2022-41583 | 7.5 | Oct 14 | The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this… Affected: 12.0.0 |
| CVE-2022-39011 | 7.5 | Oct 14 | The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access… Affected: 12.0.0 |
| CVE-2022-38998 | 7.5 | Oct 14 | The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which… Affected: 12.0.0 |
| CVE-2022-41582 | 7.5 | Oct 14 | The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability Affected: 12.0.0; 11.0.1 |
| CVE-2022-38985 | 7.5 | Oct 14 | The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality Affected: 12.0.0 |
| CVE-2022-38984 | 7.5 | Oct 14 | The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which… Affected: 12.0.0 |
| CVE-2022-41586 | 7.5 | Oct 14 | The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality Affected: 12.0.0; 11.0.1 |
| CVE-2022-41588 | 7.5 | Oct 14 | The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity Affected: 12.0.0; 11.0.1 |
| CVE-2022-41589 | 7.5 | Oct 14 | The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device… Affected: 12.0.0 |
| CVE-2022-39010 | 7.5 | Sep 16 | The HwChrService module has a vulnerability in permission control Affected: 12.0.0 |
| CVE-2022-39005 | 7.5 | Sep 16 | The MPTCP module has the memory leak vulnerability Affected: 11.0.0; 11.0.1; 12.0.0 |
| CVE-2022-39004 | 7.5 | Sep 16 | The MPTCP module has the memory leak vulnerability Affected: 11.0.0; 11.0.1; 12.0.0 |
| CVE-2022-39001 | 7.5 | Sep 16 | The number identification module has a path traversal vulnerability Affected: 11.0.0; 11.0.1; 12.0.0 |
| CVE-2022-38997 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0 |
| CVE-2022-38996 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 12.0.0 |
| CVE-2022-38995 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 12.0.0 |
| CVE-2022-38994 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 12.0.0 |
| CVE-2022-38993 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38992 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38991 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38990 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38989 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38988 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38987 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 12.0.0 |
| CVE-2022-38979 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0 |
| CVE-2022-38978 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 10.1.0; 10.1.1; 11.0.0; 12.0.0 |
| CVE-2021-46836 | 7.5 | Sep 16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability Affected: 12.0.0 |
| CVE-2021-40024 | 7.5 | Sep 16 | Implementation of the WLAN module interfaces has the information disclosure vulnerability Affected: 12.0.0 |
| CVE-2021-40023 | 7.5 | Sep 16 | Configuration defects in the secure OS module Affected: 12.0.0 |
| CVE-2020-36601 | 7.5 | Sep 16 | Out-of-bounds write vulnerability in the kernel modules Affected: 10.1.0 |
| CVE-2020-36600 | 7.5 | Sep 16 | Out-of-bounds write vulnerability in the power consumption module Affected: 10.0.0; 10.1.0; 10.1.1; 11.0.0 |
| CVE-2022-37006 | 7.5 | Aug 9 | Permission control vulnerability in the network module Affected: 12.0.0 |
| CVE-2021-40040 | 7.5 | Aug 9 | Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module Affected: 10.0.0; 10.1.0; 10.1.1; 11.0.0 |
| CVE-2021-40030 | 7.5 | Aug 9 | The My HUAWEI app has a defect in the design Affected: 12.0.0; 11.0.0; 10.1.1; 10.1.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
