HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-39401
9.1
0%
Aug 13
Parameter verification vulnerability in the installd module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39400
9.1
0%
Aug 13
Parameter verification vulnerability in the installd module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39399
9.1
0%
Aug 13
Parameter verification vulnerability in the installd module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39398
9.1
0%
Aug 13
Parameter verification vulnerability in the installd module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39385
9.1
0%
Aug 13
Vulnerability of configuration defects in the media module of certain products
Affected: 2.0.0; 2.1.0; 3.0.0
CVE-2021-46895
9.1
0%
Aug 13
Vulnerability of defects introduced in the design process in the Multi-Device Task Center
Affected: 2.0.0
CVE-2023-37245
9.1
0%
Jul 6
Buffer overflow vulnerability in the modem pinctrl module
Affected: 2.0; 2.1; 3.0.0
CVE-2023-37240
9.1
0%
Jul 6
Vulnerability of missing input length verification in the distributed file system
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-3455
9.1
0%
Jul 5
Key management vulnerability on system
Affected: 3.0.0; 3.1.0
CVE-2022-48312
9.1
0%
Apr 16
The HwPCAssistant module has the out-of-bounds read/write vulnerability
Affected: 2.0
CVE-2022-48349
9.1
0%
Mar 27
The control component has a spoofing vulnerability
Affected: 2.0; 2.0.1; 2.1.0; 3.0.0
CVE-2022-48348
9.1
0%
Mar 27
The MediaProvider module has a vulnerability of unauthorized data read
Affected: 3.0.0
CVE-2022-48290
9.1
0%
Feb 9
The phone-PC collaboration module has a logic bypass vulnerability
Affected: 3.0.0
CVE-2022-38986
9.1
1%
Oct 14
The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access…
Affected: 2.0
CVE-2021-46840
9.1
1%
Oct 14
The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of…
Affected: 2.0
CVE-2022-41581
9.1
1%
Oct 14
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in…
Affected: 2.0
CVE-2021-46839
9.1
1%
Oct 14
The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results…
Affected: 2.0
CVE-2022-39008
9.1
1%
Sep 16
The NFC module has bundle serialization/deserialization vulnerabilities
Affected: 2.0
CVE-2022-34737
9.1
1%
Jul 12
The application security module has a vulnerability in permission assignment
Affected: 2.0
CVE-2022-31760
9.1
1%
Jun 13
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services
Affected: 2.0
CVE-2022-22260
9.1
1%
May 13
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability
Affected: 2.0
CVE-2021-46742
9.1
1%
Apr 11
The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the…
Affected: 2.0
CVE-2021-40053
9.1
1%
Mar 10
There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity
Affected: 2.0; 2.1
CVE-2021-22394
9.1
1%
Feb 25
There is a buffer overflow vulnerability in smartphones
Affected: 2.0
CVE-2021-39982
9.1
1%
Jan 3
Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with…
Affected: 2.0
CVE-2021-37116
9.1
1%
Jan 3
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed
Affected: before 2.0
CVE-2021-37051
9.1
1%
Dec 8
There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access
Affected: before 2.0
CVE-2021-37099
9.1
1%
Dec 7
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file
Affected: before 2.0
CVE-2021-37088
9.1
1%
Dec 7
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any file
Affected: before 2.0
CVE-2021-37087
9.1
1%
Dec 7
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file
Affected: before 2.0
CVE-2021-37079
9.1
1%
Dec 7
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by system_app permission
Affected: before 2.0
CVE-2021-37065
9.1
1%
Dec 7
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted
Affected: before 2.0
CVE-2021-37064
9.1
1%
Dec 7
There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to arbitrary file…
Affected: before 2.0
CVE-2021-37062
9.1
1%
Dec 7
There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and information leakage
Affected: before 2.0
CVE-2021-37021
9.1
1%
Dec 7
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read
Affected: before 2.0
CVE-2021-37020
9.1
1%
Dec 7
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read
Affected: before 2.0
CVE-2021-37011
9.1
1%
Dec 7
There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read
Affected: before 2.0
CVE-2021-37016
9.1
1%
Nov 23
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of Service
Affected: 2.0
CVE-2025-54627
8.8
0%
Aug 6
Out-of-bounds write vulnerability in the skia module
Affected: 5.0.1; 5.0.2
CVE-2025-48906
8.8
0%
Jun 6
Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
CVE-2021-40002
8.8
0%
Jan 10
The Bluetooth module has an out-of-bounds write vulnerability
Affected: before 2.0
CVE-2021-40000
8.8
0%
Jan 10
The Bluetooth module has an out-of-bounds write vulnerability
Affected: before 2.0
CVE-2026-49310
8.6
0%
Sep 9
Permission control vulnerability in the event notification module
Affected: 6.1.0
CVE-2021-37086
8.6
1%
Dec 7
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read…
Affected: before 2.0
CVE-2026-41964
8.4
0%
May 15
Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability
Affected: 6.1.0; 6.0.0
CVE-2021-22376
8.4
0%
Jun 30
A component of the HarmonyOS has a Improper Privilege Management vulnerability
Affected: 2.0
CVE-2025-48911
8.2
0%
Jun 6
Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.1; 5.0.2
CVE-2023-34154
8.2
0%
Jun 16
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary…
Affected: before 2.0
CVE-2026-28536
8.1
0%
Mar 5
Authentication bypass vulnerability in the device authentication module
Affected: 6.0.0; 5.1.0
CVE-2025-48905
8.1
0%
Jun 6
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types
Affected: 5.0.0
Page 3 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)