HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-39384
7.5
0%
Aug 13
Vulnerability of incomplete permission verification in the input method module
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-39383
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the AMS module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39382
7.5
0%
Aug 13
Input verification vulnerability in the audio module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39381
7.5
0%
Aug 13
Input verification vulnerability in the storage module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39380
7.5
0%
Aug 13
Permission control vulnerability in the audio module
Affected: 3.0.0; 3.1.0
CVE-2023-37241
7.5
0%
Jul 6
Input verification vulnerability in the WMS API
Affected: 3.0.0; 3.1.0
CVE-2023-37239
7.5
0%
Jul 6
Format string vulnerability in the distributed file system
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-34164
7.5
0%
Jul 6
Vulnerability of incomplete input parameter verification in the communication framework module
Affected: 3.0.0; 3.1.0
CVE-2023-1695
7.5
0%
Jul 6
Vulnerability of failures to capture exceptions in the communication framework
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0
CVE-2023-1691
7.5
0%
Jul 6
Vulnerability of failures to capture exceptions in the communication framework
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0
CVE-2022-48520
7.5
0%
Jul 6
Unauthorized access vulnerability in the SystemUI module
Affected: 2.0.0; 2.0.1
CVE-2022-48519
7.5
0%
Jul 6
Unauthorized access vulnerability in the SystemUI module
Affected: 2.0.0; 2.0.1
CVE-2022-48517
7.5
0%
Jul 6
Unauthorized service access vulnerability in the DSoftBus module
Affected: 2.0.0; 2.0.1; 2.1.0
CVE-2022-48516
7.5
0%
Jul 6
Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module
Affected: 2.0.0; 2.0.1
CVE-2022-48515
7.5
0%
Jul 6
Vulnerability of inappropriate permission control in Nearby
Affected: 2.0.0; 2.0.1; 2.1.0
CVE-2022-48514
7.5
0%
Jul 6
The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality
Affected: 2.1.0
CVE-2022-48508
7.5
0%
Jul 6
Inappropriate authorization vulnerability in the system apps
Affected: 2.0.0; 2.0.1; 3.0.0
CVE-2022-48507
7.5
0%
Jul 6
Vulnerability of identity verification being bypassed in the storage module
Affected: 2.0.0; 2.0.1
CVE-2021-46892
7.5
0%
Jul 6
Encryption bypass vulnerability in Maintenance mode
Affected: 2.0.0
CVE-2021-46893
7.5
0%
Jul 5
Vulnerability of unstrict data verification and parameter check
Affected: 2.0
CVE-2023-1696
7.5
0%
May 20
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability
Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0
CVE-2023-1694
7.5
0%
May 20
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality
Affected: before 3.1.0
CVE-2023-1693
7.5
0%
May 20
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality
Affected: before 3.1.0
CVE-2023-1692
7.5
0%
May 20
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality
Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0
CVE-2023-26549
7.5
0%
Mar 27
The SystemUI module has a vulnerability of repeated app restart due to improper parameters
Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0
CVE-2023-26548
7.5
1%
Mar 27
The pgmng module has a vulnerability in serialization/deserialization
Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0
CVE-2022-48360
7.5
0%
Mar 27
The facial recognition module has a vulnerability in file permission control
Affected: 2.0.0; 2.1.0; 3.0.0
CVE-2022-48359
7.5
0%
Mar 27
The recovery mode for updates has a vulnerability that causes arbitrary disk modification
Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2022-48357
7.5
0%
Mar 27
Some products have the double fetch vulnerability
Affected: 2.0; 2.0.1; 3.0.0
CVE-2022-48356
7.5
0%
Mar 27
The facial recognition module has a vulnerability in input parameter verification
Affected: 2.0
CVE-2022-48352
7.5
0%
Mar 27
Some smartphones have data initialization issues
Affected: 2.0; 3.0.0
CVE-2022-48351
7.5
0%
Mar 27
The secure OS module has configuration defects
Affected: 2.0; 2.0.1; 3.0.0
CVE-2022-48350
7.5
0%
Mar 27
The HUAWEI Messaging app has a vulnerability of unauthorized file access
Affected: 3.0.0
CVE-2022-48347
7.5
0%
Mar 27
The MediaProvider module has a vulnerability in permission verification
Affected: 3.0.0
CVE-2022-48346
7.5
0%
Mar 27
The HwContacts module has a logic bypass vulnerability
Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2022-48302
7.5
0%
Feb 9
The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality
Affected: 2.0; 2.1; 3.0.0
CVE-2022-48301
7.5
0%
Feb 9
The bundle management module lacks permission verification in some APIs
Affected: 2.0; 2.1.0; 3.0.0
CVE-2022-48300
7.5
0%
Feb 9
The WMS module lacks the authentication mechanism in some APIs
Affected: 2.0; 3.0.0
CVE-2022-48299
7.5
0%
Feb 9
The WMS module lacks the authentication mechanism in some APIs
Affected: 2.0; 3.0.0
CVE-2022-48298
7.5
0%
Feb 9
The geofencing kernel code does not verify the length of the input data
Affected: 2.0; 3.0.0
CVE-2022-48297
7.5
0%
Feb 9
The geofencing kernel code has a vulnerability of not verifying the length of the input data
Affected: 2.0; 3.0.0
CVE-2022-48295
7.5
0%
Feb 9
The IHwAntiMalPlugin interface lacks permission verification
Affected: 2.0
CVE-2022-48294
7.5
0%
Feb 9
The IHwAttestationService interface has a defect in authentication
Affected: 2.0
CVE-2022-48289
7.5
0%
Feb 9
The bundle management module lacks authentication and control mechanisms in some APIs
Affected: 2.0.1; 3.0.0
CVE-2022-48288
7.5
0%
Feb 9
The bundle management module lacks authentication and control mechanisms in some APIs
Affected: 2.0.1; 3.0.0
CVE-2022-48287
7.5
0%
Feb 9
The HwContacts module has a logic bypass vulnerability
Affected: 2.0; 2.1
CVE-2022-48286
7.5
0%
Feb 9
The multi-screen collaboration module has a privilege escalation vulnerability
Affected: 2.0; 2.1; 3.0.0
CVE-2022-47976
7.5
0%
Jan 6
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal…
Affected: before 2.0
CVE-2022-47975
7.5
1%
Jan 6
The DUBAI module has a double free vulnerability
Affected: before 2.0
CVE-2022-46762
7.5
0%
Jan 6
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality
Affected: before 2.0
Page 6 of 8 · 362 total
The 500 most important CVEs for this product (exploited first, then by severity)