HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-37134 | 8.1 | Jan 3 | Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related… Affected: before 2.0 |
| CVE-2021-37074 | 8.1 | Dec 8 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation Affected: before 2.0 |
| CVE-2025-68968 | 7.8 | Jan 14 | Double free vulnerability in the multi-mode input module Affected: 6.0.0 |
| CVE-2025-54655 | 7.8 | Aug 6 | Race condition vulnerability in the virtualization base module Affected: 5.0.1; 5.0.2 |
| CVE-2025-48903 | 7.8 | Jun 6 | Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2021-37000 | 7.8 | Dec 28 | Some Huawei wearables have a permission management vulnerability Affected: 2.0 |
| CVE-2024-42038 | 7.8 | Aug 8 | Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and… Affected: 3.0.0; 4.0.0; 4.2.0 |
| CVE-2024-42035 | 7.8 | Aug 8 | Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality Affected: 4.0.0; 4.2.0 |
| CVE-2023-26547 | 7.8 | Mar 27 | The InputMethod module has a vulnerability of serialization/deserialization mismatch Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0 |
| CVE-2022-41576 | 7.8 | Oct 14 | The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices Affected: 2.0 |
| CVE-2022-41585 | 7.8 | Oct 14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting Affected: 2.0; 2.1 |
| CVE-2022-41584 | 7.8 | Oct 14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting Affected: 2.0; 2.1 |
| CVE-2022-31762 | 7.8 | Jun 13 | The AMS module has a vulnerability in input validation Affected: 2.0 |
| CVE-2021-22470 | 7.8 | Oct 28 | A component of the HarmonyOS has a Privileges Controls vulnerability Affected: 2.0 |
| CVE-2021-22458 | 7.8 | Oct 28 | A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability Affected: 2.0 |
| CVE-2021-22451 | 7.8 | Oct 28 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability Affected: 2.0 |
| CVE-2021-22425 | 7.8 | Aug 3 | A component of the HarmonyOS has a Double Free vulnerability Affected: All versions, or not specified |
| CVE-2021-22423 | 7.8 | Aug 3 | A component of the HarmonyOS has a Out-of-bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2021-22422 | 7.8 | Aug 3 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability Affected: 2.0 |
| CVE-2021-22421 | 7.8 | Aug 3 | A component of the HarmonyOS has a Improper Privilege Management vulnerability Affected: 2.0 |
| CVE-2021-22420 | 7.8 | Aug 3 | A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability Affected: 2.0 |
| CVE-2021-22418 | 7.8 | Aug 3 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability Affected: 2.0 |
| CVE-2021-22416 | 7.8 | Aug 3 | A component of the HarmonyOS has a Data Processing Errors vulnerability Affected: 2.0 |
| CVE-2025-46588 | 7.7 | May 6 | Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality Affected: 5.0.0 |
| CVE-2023-52713 | 7.7 | Apr 7 | Vulnerability of improper permission control in the window management module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52367 | 7.7 | Feb 18 | Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2025-53169 | 7.6 | Jul 7 | Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device… Affected: 5.0.1; 5.1.0 |
| CVE-2026-34856 | 7.5 | Apr 13 | UAF vulnerability in the communication module Affected: 6.0.0 |
| CVE-2026-34853 | 7.5 | Apr 13 | Permission bypass vulnerability in the LBS module Affected: 4.3.1; 4.3.0; 4.2.0; 4.0.0 |
| CVE-2026-28553 | 7.5 | Apr 13 | Vulnerability of improper permission control in the theme setting module Affected: 4.3.1; 4.3.0; 4.2.0; 4.0.0 |
| CVE-2026-34851 | 7.5 | Apr 13 | Race condition vulnerability in the event notification module Affected: 5.1.0; 6.0.0 |
| CVE-2026-28552 | 7.5 | Mar 5 | Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability Affected: 6.0.0; 5.1.0; 4.3.1; 4.3.0; 4.2.0; 4.0.0 |
| CVE-2025-64312 | 7.5 | Nov 28 | Permission control vulnerability in the file management module Affected: 5.0.1; 5.1.0; 6.0.0 |
| CVE-2025-54635 | 7.5 | Aug 6 | Vulnerability of returning released pointers in the distributed notification service Affected: 5.1.0 |
| CVE-2025-54630 | 7.5 | Aug 6 | :Vulnerability of insufficient data length verification in the DFA module Affected: 4.3.0; 5.0.1 |
| CVE-2025-54628 | 7.5 | Aug 6 | Vulnerability of incomplete verification information in the communication module Affected: 4.0.0; 4.2.0; 4.3.0; 4.3.1; 5.0.1; 5.1.0 |
| CVE-2025-54610 | 7.5 | Aug 6 | Out-of-bounds access vulnerability in the audio codec module Affected: 5.0.1; 5.1.0 |
| CVE-2025-54609 | 7.5 | Aug 6 | Out-of-bounds access vulnerability in the audio codec module Affected: 5.0.1; 5.1.0 |
| CVE-2025-54607 | 7.5 | Aug 6 | Authentication management vulnerability in the ArkWeb module Affected: 5.0.1; 5.0.2 |
| CVE-2025-53184 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53183 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53182 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53181 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53180 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53179 | 7.5 | Jul 7 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability Affected: 5.0.1; 5.1.0 |
| CVE-2025-53167 | 7.5 | Jul 7 | Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.1; 5.1.0 |
| CVE-2025-31175 | 7.5 | Apr 7 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2025-31174 | 7.5 | Apr 7 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality Affected: 5.0.0 |
| CVE-2024-58116 | 7.5 | Apr 7 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
| CVE-2024-58115 | 7.5 | Apr 7 | Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability Affected: 5.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
