HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-54098
7.5
0%
Dec 12
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-54097
7.5
0%
Dec 12
Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-51523
7.5
0%
Nov 5
Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality
Affected: 5.0.0
CVE-2024-51518
7.5
0%
Nov 5
Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
CVE-2024-9136
7.5
0%
Sep 27
Access permission verification vulnerability in the App Multiplier module Impact: Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.2.0; 4.0.0
CVE-2024-47294
7.5
0%
Sep 27
Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-47293
7.5
0%
Sep 27
Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 4.2.0; 4.0.0; 3.0.0
CVE-2024-45442
7.5
0%
Sep 4
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability
Affected: 4.2.0; 4.0.0; 3.1.0
CVE-2024-45441
7.5
0%
Sep 4
Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-42039
7.5
0%
Sep 4
Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-45450
7.5
0%
Sep 4
Permission control vulnerability in the software update module
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-42036
7.5
0%
Aug 8
Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0
CVE-2024-42031
7.5
0%
Aug 8
Access permission verification vulnerability in the Settings module
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-32992
7.5
1%
May 11
Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability
Affected: 4.2.0; 4.0.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-32990
7.5
0%
May 11
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability
Affected: 4.2.0; 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-32989
7.5
0%
May 11
Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability
Affected: 4.2.0; 4.0.0; 3.1.0
CVE-2024-27897
7.5
0%
Apr 8
Input verification vulnerability in the call module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.0
CVE-2024-27896
7.5
0%
Apr 8
Input verification vulnerability in the log module
Affected: 3.0.0
CVE-2024-27895
7.5
0%
Apr 8
Vulnerability of permission control in the window module
Affected: 4.0.0
CVE-2023-52386
7.5
0%
Apr 8
Out-of-bounds write vulnerability in the RSMC module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-52552
7.5
0%
Apr 8
Input verification vulnerability in the power module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0
CVE-2023-52550
7.5
0%
Apr 8
Vulnerability of data verification errors in the kernel module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52549
7.5
0%
Apr 8
Vulnerability of data verification errors in the kernel module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52546
7.5
0%
Apr 8
Vulnerability of package name verification being bypassed in the Calendar app
Affected: 4.0.0; 3.1.0
CVE-2023-52545
7.5
0%
Apr 8
Vulnerability of undefined permissions in the Calendar app
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-52359
7.5
0%
Apr 8
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52541
7.5
0%
Apr 8
Authentication vulnerability in the API for app pre-loading
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52540
7.5
0%
Apr 8
Vulnerability of improper authentication in the Iaware module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52539
7.5
0%
Apr 8
Permission verification vulnerability in the Settings module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52537
7.5
0%
Apr 8
Vulnerability of package name verification being bypassed in the HwIms module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52388
7.5
0%
Apr 8
Permission control vulnerability in the clock module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52716
7.5
0%
Apr 7
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52715
7.5
0%
Apr 7
The SystemUI module has a vulnerability in permission management
Affected: 4.0.0
CVE-2023-52714
7.5
0%
Apr 7
Vulnerability of defects introduced in the design process in the hwnff module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-30418
7.5
0%
Apr 7
Vulnerability of insufficient permission verification in the app management module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2024-30417
7.5
0%
Apr 7
Path traversal vulnerability in the Bluetooth-based sharing module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-30416
7.5
0%
Apr 7
Use After Free (UAF) vulnerability in the underlying driver module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2024-30414
7.5
1%
Apr 7
Command injection vulnerability in the AccountManager module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2024-30413
7.5
0%
Apr 7
Vulnerability of improper permission control in the window management module
Affected: 4.0.0; 3.1.0
CVE-2022-48621
7.5
0%
Feb 18
Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52379
7.5
0%
Feb 18
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52376
7.5
0%
Feb 18
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52375
7.5
0%
Feb 18
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52374
7.5
0%
Feb 18
Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-52373
7.5
0%
Feb 18
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52372
7.5
0%
Feb 18
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
CVE-2023-52366
7.5
0%
Feb 18
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.0
CVE-2023-52362
7.5
0%
Feb 18
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-52361
7.5
0%
Feb 18
The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity
Affected: 4.0.0
CVE-2023-52360
7.5
0%
Feb 18
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity
Affected: 4.0.0; 2.1.0; 2.0.0
Page 6 of 10 · 500 total
1…567…10
The 500 most important CVEs for this product (exploited first, then by severity)