HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-52360 | 7.5 | Feb 18 | Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity Affected: 2.0.0; 2.1.0; 4.0.0 |
| CVE-2023-52357 | 7.5 | Feb 18 | Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52097 | 7.5 | Feb 18 | Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52105 | 7.5 | Jan 16 | The nearby module has a privilege escalation vulnerability Affected: 4.0.0 |
| CVE-2023-52104 | 7.5 | Jan 16 | Vulnerability of parameters being not verified in the WMS module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52102 | 7.5 | Jan 16 | Vulnerability of parameters being not verified in the WMS module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52100 | 7.5 | Jan 16 | The Celia Keyboard module has a vulnerability in access control Affected: 4.0.0 |
| CVE-2023-52099 | 7.5 | Jan 16 | Vulnerability of foreground service restrictions being bypassed in the NMS module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52116 | 7.5 | Jan 16 | Permission management vulnerability in the multi-screen interaction module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52115 | 7.5 | Jan 16 | The iaware module has a Use-After-Free (UAF) vulnerability Affected: 4.0.0 |
| CVE-2023-52114 | 7.5 | Jan 16 | Data confidentiality vulnerability in the ScreenReader module Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52108 | 7.5 | Jan 16 | Vulnerability of process priorities being raised in the ActivityManagerService module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52107 | 7.5 | Jan 16 | Vulnerability of permissions being not strictly verified in the WMS module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52098 | 7.5 | Jan 16 | Denial of Service (DoS) vulnerability in the DMS module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52113 | 7.5 | Jan 16 | launchAnyWhere vulnerability in the ActivityManagerService module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52111 | 7.5 | Jan 16 | Authorization vulnerability in the BootLoader module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-52110 | 7.5 | Jan 16 | The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability Affected: 4.0.0 |
| CVE-2023-52109 | 7.5 | Jan 16 | Vulnerability of trust relationships being inaccurate in distributed scenarios Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-4566 | 7.5 | Jan 16 | Vulnerability of trust relationships being inaccurate in distributed scenarios Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44117 | 7.5 | Jan 16 | Vulnerability of trust relationships being inaccurate in distributed scenarios Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44112 | 7.5 | Jan 16 | Out-of-bounds access vulnerability in the device authentication module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49247 | 7.5 | Dec 6 | Permission verification vulnerability in distributed scenarios Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49246 | 7.5 | Dec 6 | Unauthorized access vulnerability in the card management module Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49245 | 7.5 | Dec 6 | Unauthorized access vulnerability in the Huawei Share module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49244 | 7.5 | Dec 6 | Permission management vulnerability in the multi-user module Affected: 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49243 | 7.5 | Dec 6 | Vulnerability of unauthorized access to email attachments in the email module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49242 | 7.5 | Dec 6 | Free broadcast vulnerability in the running management module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49241 | 7.5 | Dec 6 | API permission control vulnerability in the network management module Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49240 | 7.5 | Dec 6 | Unauthorized access vulnerability in the launcher module Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-49239 | 7.5 | Dec 6 | Unauthorized access vulnerability in the card management module Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44113 | 7.5 | Dec 6 | Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module Affected: 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44099 | 7.5 | Dec 6 | Vulnerability of data verification errors in the kernel module Affected: 2.0.0; 2.1.0; 3.0.0; 4.0.0 |
| CVE-2023-46759 | 7.5 | Nov 8 | Permission control vulnerability in the call module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46758 | 7.5 | Nov 8 | Permission management vulnerability in the multi-screen interaction module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46757 | 7.5 | Nov 8 | The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality Affected: 4.0.0 |
| CVE-2023-46774 | 7.5 | Nov 8 | Vulnerability of uncaught exceptions in the NFC module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46767 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46766 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46765 | 7.5 | Nov 8 | Vulnerability of uncaught exceptions in the NFC module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46762 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46761 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46760 | 7.5 | Nov 8 | Out-of-bounds write vulnerability in the kernel driver module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46771 | 7.5 | Nov 8 | Security vulnerability in the face unlock module Affected: 2.0.0; 3.0.0; 4.0.0 |
| CVE-2023-44098 | 7.5 | Nov 8 | Vulnerability of missing encryption in the card management module Affected: 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44115 | 7.5 | Nov 8 | Vulnerability of improper permission control in the Booster module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46770 | 7.5 | Nov 8 | Out-of-bounds vulnerability in the sensor module Affected: 2.0.0; 3.0.0; 4.0.0 |
| CVE-2023-46769 | 7.5 | Nov 8 | Use-After-Free (UAF) vulnerability in the dubai module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-46768 | 7.5 | Nov 8 | Multi-thread vulnerability in the idmap module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44119 | 7.5 | Oct 11 | Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-44114 | 7.5 | Oct 11 | Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 3.0.0; 3.1.0; 4.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
