HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-37134
8.1
1%
Jan 3
Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related…
Affected: before 2.0
CVE-2021-37074
8.1
1%
Dec 8
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation
Affected: before 2.0
CVE-2025-68968
7.8
0%
Jan 14
Double free vulnerability in the multi-mode input module
Affected: 6.0.0
CVE-2025-54655
7.8
0%
Aug 6
Race condition vulnerability in the virtualization base module
Affected: 5.0.1; 5.0.2
CVE-2025-48903
7.8
0%
Jun 6
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
CVE-2021-37000
7.8
0%
Dec 28
Some Huawei wearables have a permission management vulnerability
Affected: 2.0
CVE-2024-42038
7.8
0%
Aug 8
Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and…
Affected: 3.0.0; 4.0.0; 4.2.0
CVE-2024-42035
7.8
0%
Aug 8
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality
Affected: 4.0.0; 4.2.0
CVE-2023-26547
7.8
0%
Mar 27
The InputMethod module has a vulnerability of serialization/deserialization mismatch
Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0
CVE-2022-41576
7.8
0%
Oct 14
The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices
Affected: 2.0
CVE-2022-41585
7.8
0%
Oct 14
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting
Affected: 2.0; 2.1
CVE-2022-41584
7.8
0%
Oct 14
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting
Affected: 2.0; 2.1
CVE-2022-31762
7.8
0%
Jun 13
The AMS module has a vulnerability in input validation
Affected: 2.0
CVE-2021-22470
7.8
0%
Oct 28
A component of the HarmonyOS has a Privileges Controls vulnerability
Affected: 2.0
CVE-2021-22458
7.8
0%
Oct 28
A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability
Affected: 2.0
CVE-2021-22451
7.8
0%
Oct 28
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability
Affected: 2.0
CVE-2021-22425
7.8
0%
Aug 3
A component of the HarmonyOS has a Double Free vulnerability
Affected: All versions, or not specified
CVE-2021-22423
7.8
0%
Aug 3
A component of the HarmonyOS has a Out-of-bounds Write Vulnerability
Affected: All versions, or not specified
CVE-2021-22422
7.8
0%
Aug 3
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability
Affected: 2.0
CVE-2021-22421
7.8
0%
Aug 3
A component of the HarmonyOS has a Improper Privilege Management vulnerability
Affected: 2.0
CVE-2021-22420
7.8
0%
Aug 3
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability
Affected: 2.0
CVE-2021-22418
7.8
0%
Aug 3
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability
Affected: 2.0
CVE-2021-22416
7.8
0%
Aug 3
A component of the HarmonyOS has a Data Processing Errors vulnerability
Affected: 2.0
CVE-2025-46588
7.7
0%
May 6
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 5.0.0
CVE-2023-52713
7.7
0%
Apr 7
Vulnerability of improper permission control in the window management module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52367
7.7
0%
Feb 18
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2025-53169
7.6
0%
Jul 7
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device…
Affected: 5.0.1; 5.1.0
CVE-2026-34856
7.5
0%
Apr 13
UAF vulnerability in the communication module
Affected: 6.0.0
CVE-2026-34853
7.5
0%
Apr 13
Permission bypass vulnerability in the LBS module
Affected: 4.3.1; 4.3.0; 4.2.0; 4.0.0
CVE-2026-28553
7.5
0%
Apr 13
Vulnerability of improper permission control in the theme setting module
Affected: 4.3.1; 4.3.0; 4.2.0; 4.0.0
CVE-2026-34851
7.5
0%
Apr 13
Race condition vulnerability in the event notification module
Affected: 5.1.0; 6.0.0
CVE-2026-28552
7.5
0%
Mar 5
Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability
Affected: 6.0.0; 5.1.0; 4.3.1; 4.3.0; 4.2.0; 4.0.0
CVE-2025-64312
7.5
0%
Nov 28
Permission control vulnerability in the file management module
Affected: 5.0.1; 5.1.0; 6.0.0
CVE-2025-54635
7.5
0%
Aug 6
Vulnerability of returning released pointers in the distributed notification service
Affected: 5.1.0
CVE-2025-54630
7.5
0%
Aug 6
:Vulnerability of insufficient data length verification in the DFA module
Affected: 4.3.0; 5.0.1
CVE-2025-54628
7.5
0%
Aug 6
Vulnerability of incomplete verification information in the communication module
Affected: 4.0.0; 4.2.0; 4.3.0; 4.3.1; 5.0.1; 5.1.0
CVE-2025-54610
7.5
0%
Aug 6
Out-of-bounds access vulnerability in the audio codec module
Affected: 5.0.1; 5.1.0
CVE-2025-54609
7.5
0%
Aug 6
Out-of-bounds access vulnerability in the audio codec module
Affected: 5.0.1; 5.1.0
CVE-2025-54607
7.5
0%
Aug 6
Authentication management vulnerability in the ArkWeb module
Affected: 5.0.1; 5.0.2
CVE-2025-53184
7.5
0%
Jul 7
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability
Affected: 5.0.1; 5.1.0
CVE-2025-53183
7.5
0%
Jul 7
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability
Affected: 5.0.1; 5.1.0
CVE-2025-53182
7.5
0%
Jul 7
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability
Affected: 5.0.1; 5.1.0
CVE-2025-53181
7.5
0%
Jul 7
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability
Affected: 5.0.1; 5.1.0
CVE-2025-53180
7.5
0%
Jul 7
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability
Affected: 5.0.1; 5.1.0
CVE-2025-53179
7.5
0%
Jul 7
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability
Affected: 5.0.1; 5.1.0
CVE-2025-53167
7.5
0%
Jul 7
Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality
Affected: 5.0.1; 5.1.0
CVE-2025-31175
7.5
0%
Apr 7
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2025-31174
7.5
0%
Apr 7
Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality
Affected: 5.0.0
CVE-2024-58116
7.5
0%
Apr 7
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
CVE-2024-58115
7.5
0%
Apr 7
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
Page 4 of 10 · 500 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)