HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54113 | 7.5 | Dec 12 | Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption Affected: 5.0.0 |
| CVE-2024-54112 | 7.5 | Dec 12 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54111 | 7.5 | Dec 12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54110 | 7.5 | Dec 12 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54109 | 7.5 | Dec 12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54108 | 7.5 | Dec 12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54107 | 7.5 | Dec 12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54106 | 7.5 | Dec 12 | Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54105 | 7.5 | Dec 12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability Affected: 5.0.0 |
| CVE-2024-54104 | 7.5 | Dec 12 | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54103 | 7.5 | Dec 12 | Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-54100 | 7.5 | Dec 12 | Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-54098 | 7.5 | Dec 12 | Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-54097 | 7.5 | Dec 12 | Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-51523 | 7.5 | Nov 5 | Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-51518 | 7.5 | Nov 5 | Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-9136 | 7.5 | Sep 27 | Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 4.0.0; 4.2.0 |
| CVE-2024-47294 | 7.5 | Sep 27 | Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-47293 | 7.5 | Sep 27 | Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability Affected: 3.0.0; 4.0.0; 4.2.0 |
| CVE-2024-45442 | 7.5 | Sep 4 | Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability Affected: 4.2.0; 4.0.0; 3.1.0 |
| CVE-2024-45441 | 7.5 | Sep 4 | Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2024-42039 | 7.5 | Sep 4 | Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2024-45450 | 7.5 | Sep 4 | Permission control vulnerability in the software update module Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0 |
| CVE-2024-42036 | 7.5 | Aug 8 | Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-42031 | 7.5 | Aug 8 | Access permission verification vulnerability in the Settings module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-32992 | 7.5 | May 14 | Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability Affected: 2.0.0; 2.1.0; 3.0.0; 4.0.0; 4.2.0 |
| CVE-2024-32990 | 7.5 | May 14 | Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-32989 | 7.5 | May 14 | Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability Affected: 3.1.0; 4.0.0; 4.2.0 |
| CVE-2024-27897 | 7.5 | Apr 8 | Input verification vulnerability in the call module Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2024-27896 | 7.5 | Apr 8 | Input verification vulnerability in the log module Affected: 3.0.0 |
| CVE-2024-27895 | 7.5 | Apr 8 | Vulnerability of permission control in the window module Affected: 4.0.0 |
| CVE-2023-52386 | 7.5 | Apr 8 | Out-of-bounds write vulnerability in the RSMC module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52552 | 7.5 | Apr 8 | Input verification vulnerability in the power module Affected: 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52550 | 7.5 | Apr 8 | Vulnerability of data verification errors in the kernel module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52549 | 7.5 | Apr 8 | Vulnerability of data verification errors in the kernel module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52546 | 7.5 | Apr 8 | Vulnerability of package name verification being bypassed in the Calendar app Affected: 3.1.0; 4.0.0 |
| CVE-2023-52545 | 7.5 | Apr 8 | Vulnerability of undefined permissions in the Calendar app Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52541 | 7.5 | Apr 8 | Authentication vulnerability in the API for app pre-loading Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52540 | 7.5 | Apr 8 | Vulnerability of improper authentication in the Iaware module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52539 | 7.5 | Apr 8 | Permission verification vulnerability in the Settings module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52537 | 7.5 | Apr 8 | Vulnerability of package name verification being bypassed in the HwIms module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52388 | 7.5 | Apr 8 | Permission control vulnerability in the clock module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52359 | 7.5 | Apr 8 | Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2024-30418 | 7.5 | Apr 7 | Vulnerability of insufficient permission verification in the app management module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2024-30417 | 7.5 | Apr 7 | Path traversal vulnerability in the Bluetooth-based sharing module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2024-30416 | 7.5 | Apr 7 | Use After Free (UAF) vulnerability in the underlying driver module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52716 | 7.5 | Apr 7 | Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52715 | 7.5 | Apr 7 | The SystemUI module has a vulnerability in permission management Affected: 4.0.0 |
| CVE-2023-52714 | 7.5 | Apr 7 | Vulnerability of defects introduced in the design process in the hwnff module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2024-30414 | 7.5 | Apr 7 | Command injection vulnerability in the AccountManager module Affected: 3.0.0; 3.1.0; 4.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)