HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-46761
7.5
0%
Jan 6
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons
Affected: before 2.0
CVE-2021-46868
7.5
0%
Jan 6
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access
Affected: before 2.0
CVE-2021-46867
7.5
0%
Jan 6
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access
Affected: before 2.0
CVE-2022-46328
7.5
0%
Dec 20
Some smartphones have the input validation vulnerability
Affected: before 2.1
CVE-2022-46322
7.5
0%
Dec 20
Some smartphones have the out-of-bounds write vulnerability
Affected: before 2.0
CVE-2022-46321
7.5
0%
Dec 20
The Wi-Fi module has a vulnerability in permission verification
Affected: before 2.1
CVE-2022-46317
7.5
0%
Dec 20
The power consumption module has an out-of-bounds read vulnerability
Affected: before 2.1
CVE-2022-46315
7.5
1%
Dec 20
The ProfileSDK has defects introduced in the design process
Affected: before 2.1
CVE-2022-46314
7.5
0%
Dec 20
The IPC module has defects introduced in the design process
Affected: before 3.0.0
CVE-2022-46312
7.5
0%
Dec 20
The application management module has a vulnerability in permission verification
Affected: before 2.1
CVE-2022-46311
7.5
0%
Dec 20
The contacts component has a free (undefined) provider vulnerability
Affected: before 2.0
CVE-2022-46310
7.5
0%
Dec 20
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality
Affected: before 3.0.0
CVE-2022-41599
7.5
0%
Dec 20
The system service has a vulnerability that causes incorrect return values
Affected: before 2.1
CVE-2022-41596
7.5
0%
Dec 20
The system tool has inconsistent serialization and deserialization
Affected: before 2.1
CVE-2022-41591
7.5
1%
Dec 20
The backup module has a path traversal vulnerability
Affected: 2.0; 2.1; 3.0.0
CVE-2021-46856
7.5
1%
Dec 20
The multi-screen collaboration module has a path traversal vulnerability
Affected: 2.0; 3.0.0
CVE-2022-44561
7.5
0%
Nov 9
The preset launcher module has a permission verification vulnerability
Affected: 2.0; 3.0.0
CVE-2022-44557
7.5
0%
Nov 9
The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files
Affected: 2.0; 2.1; 3.0.0
CVE-2022-44555
7.5
0%
Nov 9
The DDMP/ODMF module has a service hijacking vulnerability
Affected: 2.0; 2.1; 3.0.0
CVE-2022-44554
7.5
0%
Nov 9
The power module has a vulnerability in permission verification
Affected: 2.0
CVE-2022-44552
7.5
1%
Nov 9
The lock screen module has defects introduced in the design process
Affected: 2.0
CVE-2022-44550
7.5
1%
Nov 9
The graphics display module has a UAF vulnerability when traversing graphic layers
Affected: 2.0; 2.1
CVE-2022-44549
7.5
0%
Nov 9
The LBS module has a vulnerability in geofencing API access
Affected: 2.0; 2.1
CVE-2022-44547
7.5
1%
Nov 9
The Display Service module has a UAF vulnerability
Affected: 2.0
CVE-2022-44546
7.5
1%
Nov 9
The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released
Affected: 2.0
CVE-2021-46852
7.5
0%
Nov 9
The memory management module has the logic bypass vulnerability
Affected: 2.0
CVE-2022-44556
7.5
0%
Nov 8
Missing parameter type validation in the DRM module
Affected: 2.0; 3.0.0
CVE-2022-41589
7.5
1%
Oct 14
The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device…
Affected: 2.0
CVE-2022-41588
7.5
0%
Oct 14
The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity
Affected: 2.0; 2.1
CVE-2022-41586
7.5
1%
Oct 14
The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality
Affected: 2.0; 2.1
CVE-2022-41583
7.5
0%
Oct 14
The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this…
Affected: 2.0
CVE-2022-41582
7.5
1%
Oct 14
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability
Affected: 2.0
CVE-2022-39011
7.5
1%
Oct 14
The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access…
Affected: 2.0
CVE-2022-38998
7.5
1%
Oct 14
The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which…
Affected: 2.0
CVE-2022-38985
7.5
1%
Oct 14
The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality
Affected: 2.0
CVE-2022-38984
7.5
1%
Oct 14
The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which…
Affected: 2.0
CVE-2022-38981
7.5
1%
Oct 14
The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage
Affected: 2.0; 2.1
CVE-2022-38977
7.5
0%
Oct 14
The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data
Affected: 2.0; 2.1
CVE-2022-39010
7.5
1%
Sep 16
The HwChrService module has a vulnerability in permission control
Affected: 2.0
CVE-2022-39005
7.5
1%
Sep 16
The MPTCP module has the memory leak vulnerability
Affected: 2.0; 2.1
CVE-2022-39004
7.5
1%
Sep 16
The MPTCP module has the memory leak vulnerability
Affected: 2.0; 2.1
CVE-2022-39001
7.5
1%
Sep 16
The number identification module has a path traversal vulnerability
Affected: 2.0
CVE-2022-38997
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0; 2.1
CVE-2022-38996
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0; 2.1
CVE-2022-38995
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0; 2.1
CVE-2022-38994
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0; 2.1
CVE-2022-38993
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0; 2.1
CVE-2022-38992
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0
CVE-2022-38991
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0
CVE-2022-38990
7.5
1%
Sep 16
The secure OS module has configuration defects
Affected: 2.0
Page 7 of 8 · 362 total
1…678
The 500 most important CVEs for this product (exploited first, then by severity)