HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-52360
7.5
0%
Feb 18
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity
Affected: 2.0.0; 2.1.0; 4.0.0
CVE-2023-52357
7.5
0%
Feb 18
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52097
7.5
0%
Feb 18
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52105
7.5
0%
Jan 16
The nearby module has a privilege escalation vulnerability
Affected: 4.0.0
CVE-2023-52104
7.5
0%
Jan 16
Vulnerability of parameters being not verified in the WMS module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-52102
7.5
0%
Jan 16
Vulnerability of parameters being not verified in the WMS module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52100
7.5
0%
Jan 16
The Celia Keyboard module has a vulnerability in access control
Affected: 4.0.0
CVE-2023-52099
7.5
0%
Jan 16
Vulnerability of foreground service restrictions being bypassed in the NMS module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52116
7.5
0%
Jan 16
Permission management vulnerability in the multi-screen interaction module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52115
7.5
0%
Jan 16
The iaware module has a Use-After-Free (UAF) vulnerability
Affected: 4.0.0
CVE-2023-52114
7.5
0%
Jan 16
Data confidentiality vulnerability in the ScreenReader module
Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52108
7.5
0%
Jan 16
Vulnerability of process priorities being raised in the ActivityManagerService module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52107
7.5
0%
Jan 16
Vulnerability of permissions being not strictly verified in the WMS module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52098
7.5
0%
Jan 16
Denial of Service (DoS) vulnerability in the DMS module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52113
7.5
0%
Jan 16
launchAnyWhere vulnerability in the ActivityManagerService module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52111
7.5
0%
Jan 16
Authorization vulnerability in the BootLoader module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-52110
7.5
0%
Jan 16
The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability
Affected: 4.0.0
CVE-2023-52109
7.5
0%
Jan 16
Vulnerability of trust relationships being inaccurate in distributed scenarios
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-4566
7.5
0%
Jan 16
Vulnerability of trust relationships being inaccurate in distributed scenarios
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-44117
7.5
0%
Jan 16
Vulnerability of trust relationships being inaccurate in distributed scenarios
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-44112
7.5
0%
Jan 16
Out-of-bounds access vulnerability in the device authentication module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49247
7.5
0%
Dec 6
Permission verification vulnerability in distributed scenarios
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49246
7.5
0%
Dec 6
Unauthorized access vulnerability in the card management module
Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49245
7.5
0%
Dec 6
Unauthorized access vulnerability in the Huawei Share module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49244
7.5
0%
Dec 6
Permission management vulnerability in the multi-user module
Affected: 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49243
7.5
0%
Dec 6
Vulnerability of unauthorized access to email attachments in the email module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49242
7.5
0%
Dec 6
Free broadcast vulnerability in the running management module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49241
7.5
0%
Dec 6
API permission control vulnerability in the network management module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49240
7.5
0%
Dec 6
Unauthorized access vulnerability in the launcher module
Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-49239
7.5
0%
Dec 6
Unauthorized access vulnerability in the card management module
Affected: 2.0.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44113
7.5
0%
Dec 6
Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module
Affected: 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44099
7.5
1%
Dec 6
Vulnerability of data verification errors in the kernel module
Affected: 2.0.0; 2.1.0; 3.0.0; 4.0.0
CVE-2023-46759
7.5
0%
Nov 8
Permission control vulnerability in the call module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-46758
7.5
0%
Nov 8
Permission management vulnerability in the multi-screen interaction module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-46757
7.5
0%
Nov 8
The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality
Affected: 4.0.0
CVE-2023-46774
7.5
1%
Nov 8
Vulnerability of uncaught exceptions in the NFC module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-46767
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46766
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46765
7.5
1%
Nov 8
Vulnerability of uncaught exceptions in the NFC module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-46762
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46761
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46760
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46771
7.5
0%
Nov 8
Security vulnerability in the face unlock module
Affected: 2.0.0; 3.0.0; 4.0.0
CVE-2023-44098
7.5
0%
Nov 8
Vulnerability of missing encryption in the card management module
Affected: 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44115
7.5
0%
Nov 8
Vulnerability of improper permission control in the Booster module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-46770
7.5
1%
Nov 8
Out-of-bounds vulnerability in the sensor module
Affected: 2.0.0; 3.0.0; 4.0.0
CVE-2023-46769
7.5
1%
Nov 8
Use-After-Free (UAF) vulnerability in the dubai module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-46768
7.5
1%
Nov 8
Multi-thread vulnerability in the idmap module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-44119
7.5
0%
Oct 11
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-44114
7.5
0%
Oct 11
Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 3.0.0; 3.1.0; 4.0.0
Page 7 of 10 · 500 total
1…678…10
The 500 most important CVEs for this product (exploited first, then by severity)