HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39401 | 9.1 | Aug 13 | Parameter verification vulnerability in the installd module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39400 | 9.1 | Aug 13 | Parameter verification vulnerability in the installd module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39399 | 9.1 | Aug 13 | Parameter verification vulnerability in the installd module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39398 | 9.1 | Aug 13 | Parameter verification vulnerability in the installd module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39385 | 9.1 | Aug 13 | Vulnerability of configuration defects in the media module of certain products Affected: 2.0.0; 2.1.0; 3.0.0 |
| CVE-2021-46895 | 9.1 | Aug 13 | Vulnerability of defects introduced in the design process in the Multi-Device Task Center Affected: 2.0.0 |
| CVE-2023-37245 | 9.1 | Jul 6 | Buffer overflow vulnerability in the modem pinctrl module Affected: 2.0; 2.1; 3.0.0 |
| CVE-2023-37240 | 9.1 | Jul 6 | Vulnerability of missing input length verification in the distributed file system Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-3455 | 9.1 | Jul 5 | Key management vulnerability on system Affected: 3.0.0; 3.1.0 |
| CVE-2022-48312 | 9.1 | Apr 16 | The HwPCAssistant module has the out-of-bounds read/write vulnerability Affected: 2.0 |
| CVE-2022-48349 | 9.1 | Mar 27 | The control component has a spoofing vulnerability Affected: 2.0; 2.0.1; 2.1.0; 3.0.0 |
| CVE-2022-48348 | 9.1 | Mar 27 | The MediaProvider module has a vulnerability of unauthorized data read Affected: 3.0.0 |
| CVE-2022-48290 | 9.1 | Feb 9 | The phone-PC collaboration module has a logic bypass vulnerability Affected: 3.0.0 |
| CVE-2022-38986 | 9.1 | Oct 14 | The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access… Affected: 2.0 |
| CVE-2021-46840 | 9.1 | Oct 14 | The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of… Affected: 2.0 |
| CVE-2022-41581 | 9.1 | Oct 14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of data, which results in… Affected: 2.0 |
| CVE-2021-46839 | 9.1 | Oct 14 | The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results… Affected: 2.0 |
| CVE-2022-39008 | 9.1 | Sep 16 | The NFC module has bundle serialization/deserialization vulnerabilities Affected: 2.0 |
| CVE-2022-34737 | 9.1 | Jul 12 | The application security module has a vulnerability in permission assignment Affected: 2.0 |
| CVE-2022-31760 | 9.1 | Jun 13 | Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services Affected: 2.0 |
| CVE-2022-22260 | 9.1 | May 13 | The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability Affected: 2.0 |
| CVE-2021-46742 | 9.1 | Apr 11 | The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the… Affected: 2.0 |
| CVE-2021-40053 | 9.1 | Mar 10 | There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity Affected: 2.0; 2.1 |
| CVE-2021-22394 | 9.1 | Feb 25 | There is a buffer overflow vulnerability in smartphones Affected: 2.0 |
| CVE-2021-39982 | 9.1 | Jan 3 | Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with… Affected: 2.0 |
| CVE-2021-37116 | 9.1 | Jan 3 | PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed Affected: before 2.0 |
| CVE-2021-37051 | 9.1 | Dec 8 | There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access Affected: before 2.0 |
| CVE-2021-37099 | 9.1 | Dec 7 | There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file Affected: before 2.0 |
| CVE-2021-37088 | 9.1 | Dec 7 | There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any file Affected: before 2.0 |
| CVE-2021-37087 | 9.1 | Dec 7 | There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file Affected: before 2.0 |
| CVE-2021-37079 | 9.1 | Dec 7 | There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by system_app permission Affected: before 2.0 |
| CVE-2021-37065 | 9.1 | Dec 7 | There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted Affected: before 2.0 |
| CVE-2021-37064 | 9.1 | Dec 7 | There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to arbitrary file… Affected: before 2.0 |
| CVE-2021-37062 | 9.1 | Dec 7 | There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and information leakage Affected: before 2.0 |
| CVE-2021-37021 | 9.1 | Dec 7 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read Affected: before 2.0 |
| CVE-2021-37020 | 9.1 | Dec 7 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read Affected: before 2.0 |
| CVE-2021-37011 | 9.1 | Dec 7 | There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read Affected: before 2.0 |
| CVE-2021-37016 | 9.1 | Nov 23 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of Service Affected: 2.0 |
| CVE-2025-54627 | 8.8 | Aug 6 | Out-of-bounds write vulnerability in the skia module Affected: 5.0.1; 5.0.2 |
| CVE-2025-48906 | 8.8 | Jun 6 | Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2021-40002 | 8.8 | Jan 10 | The Bluetooth module has an out-of-bounds write vulnerability Affected: before 2.0 |
| CVE-2021-40000 | 8.8 | Jan 10 | The Bluetooth module has an out-of-bounds write vulnerability Affected: before 2.0 |
| CVE-2026-49310 | 8.6 | Sep 9 | Permission control vulnerability in the event notification module Affected: 6.1.0 |
| CVE-2021-37086 | 8.6 | Dec 7 | There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read… Affected: before 2.0 |
| CVE-2026-41964 | 8.4 | May 15 | Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability Affected: 6.1.0; 6.0.0 |
| CVE-2021-22376 | 8.4 | Jun 30 | A component of the HarmonyOS has a Improper Privilege Management vulnerability Affected: 2.0 |
| CVE-2025-48911 | 8.2 | Jun 6 | Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.1; 5.0.2 |
| CVE-2023-34154 | 8.2 | Jun 16 | Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary… Affected: before 2.0 |
| CVE-2026-28536 | 8.1 | Mar 5 | Authentication bypass vulnerability in the device authentication module Affected: 6.0.0; 5.1.0 |
| CVE-2025-48905 | 8.1 | Jun 6 | Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types Affected: 5.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
