HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46761 | 7.5 | Jan 6 | The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons Affected: before 2.0 |
| CVE-2021-46868 | 7.5 | Jan 6 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access Affected: before 2.0 |
| CVE-2021-46867 | 7.5 | Jan 6 | The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access Affected: before 2.0 |
| CVE-2022-46328 | 7.5 | Dec 20 | Some smartphones have the input validation vulnerability Affected: before 2.1 |
| CVE-2022-46322 | 7.5 | Dec 20 | Some smartphones have the out-of-bounds write vulnerability Affected: before 2.0 |
| CVE-2022-46321 | 7.5 | Dec 20 | The Wi-Fi module has a vulnerability in permission verification Affected: before 2.1 |
| CVE-2022-46317 | 7.5 | Dec 20 | The power consumption module has an out-of-bounds read vulnerability Affected: before 2.1 |
| CVE-2022-46315 | 7.5 | Dec 20 | The ProfileSDK has defects introduced in the design process Affected: before 2.1 |
| CVE-2022-46314 | 7.5 | Dec 20 | The IPC module has defects introduced in the design process Affected: before 3.0.0 |
| CVE-2022-46312 | 7.5 | Dec 20 | The application management module has a vulnerability in permission verification Affected: before 2.1 |
| CVE-2022-46311 | 7.5 | Dec 20 | The contacts component has a free (undefined) provider vulnerability Affected: before 2.0 |
| CVE-2022-46310 | 7.5 | Dec 20 | The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality Affected: before 3.0.0 |
| CVE-2022-41599 | 7.5 | Dec 20 | The system service has a vulnerability that causes incorrect return values Affected: before 2.1 |
| CVE-2022-41596 | 7.5 | Dec 20 | The system tool has inconsistent serialization and deserialization Affected: before 2.1 |
| CVE-2022-41591 | 7.5 | Dec 20 | The backup module has a path traversal vulnerability Affected: 2.0; 2.1; 3.0.0 |
| CVE-2021-46856 | 7.5 | Dec 20 | The multi-screen collaboration module has a path traversal vulnerability Affected: 2.0; 3.0.0 |
| CVE-2022-44561 | 7.5 | Nov 9 | The preset launcher module has a permission verification vulnerability Affected: 2.0; 3.0.0 |
| CVE-2022-44557 | 7.5 | Nov 9 | The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files Affected: 2.0; 2.1; 3.0.0 |
| CVE-2022-44555 | 7.5 | Nov 9 | The DDMP/ODMF module has a service hijacking vulnerability Affected: 2.0; 2.1; 3.0.0 |
| CVE-2022-44554 | 7.5 | Nov 9 | The power module has a vulnerability in permission verification Affected: 2.0 |
| CVE-2022-44552 | 7.5 | Nov 9 | The lock screen module has defects introduced in the design process Affected: 2.0 |
| CVE-2022-44550 | 7.5 | Nov 9 | The graphics display module has a UAF vulnerability when traversing graphic layers Affected: 2.0; 2.1 |
| CVE-2022-44549 | 7.5 | Nov 9 | The LBS module has a vulnerability in geofencing API access Affected: 2.0; 2.1 |
| CVE-2022-44547 | 7.5 | Nov 9 | The Display Service module has a UAF vulnerability Affected: 2.0 |
| CVE-2022-44546 | 7.5 | Nov 9 | The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released Affected: 2.0 |
| CVE-2021-46852 | 7.5 | Nov 9 | The memory management module has the logic bypass vulnerability Affected: 2.0 |
| CVE-2022-44556 | 7.5 | Nov 8 | Missing parameter type validation in the DRM module Affected: 2.0; 3.0.0 |
| CVE-2022-41589 | 7.5 | Oct 14 | The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device… Affected: 2.0 |
| CVE-2022-41588 | 7.5 | Oct 14 | The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity Affected: 2.0; 2.1 |
| CVE-2022-41586 | 7.5 | Oct 14 | The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality Affected: 2.0; 2.1 |
| CVE-2022-41583 | 7.5 | Oct 14 | The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this… Affected: 2.0 |
| CVE-2022-41582 | 7.5 | Oct 14 | The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability Affected: 2.0 |
| CVE-2022-39011 | 7.5 | Oct 14 | The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access… Affected: 2.0 |
| CVE-2022-38998 | 7.5 | Oct 14 | The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which… Affected: 2.0 |
| CVE-2022-38985 | 7.5 | Oct 14 | The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality Affected: 2.0 |
| CVE-2022-38984 | 7.5 | Oct 14 | The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which… Affected: 2.0 |
| CVE-2022-38981 | 7.5 | Oct 14 | The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage Affected: 2.0; 2.1 |
| CVE-2022-38977 | 7.5 | Oct 14 | The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data Affected: 2.0; 2.1 |
| CVE-2022-39010 | 7.5 | Sep 16 | The HwChrService module has a vulnerability in permission control Affected: 2.0 |
| CVE-2022-39005 | 7.5 | Sep 16 | The MPTCP module has the memory leak vulnerability Affected: 2.0; 2.1 |
| CVE-2022-39004 | 7.5 | Sep 16 | The MPTCP module has the memory leak vulnerability Affected: 2.0; 2.1 |
| CVE-2022-39001 | 7.5 | Sep 16 | The number identification module has a path traversal vulnerability Affected: 2.0 |
| CVE-2022-38997 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0; 2.1 |
| CVE-2022-38996 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0; 2.1 |
| CVE-2022-38995 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0; 2.1 |
| CVE-2022-38994 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0; 2.1 |
| CVE-2022-38993 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0; 2.1 |
| CVE-2022-38992 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0 |
| CVE-2022-38991 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0 |
| CVE-2022-38990 | 7.5 | Sep 16 | The secure OS module has configuration defects Affected: 2.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
