HA
Product
HarmonyOS
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch
Add HarmonyOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44108 | 7.5 | Oct 11 | Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44111 | 7.5 | Oct 11 | Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44104 | 7.5 | Oct 11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44103 | 7.5 | Oct 11 | Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 4.0.0 |
| CVE-2023-44101 | 7.5 | Oct 11 | The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality Affected: 2.0.0; 2.1.0; 3.1.0; 4.0.0 |
| CVE-2023-44100 | 7.5 | Oct 11 | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44097 | 7.5 | Oct 11 | Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.1; 3.0.0 |
| CVE-2023-44095 | 7.5 | Oct 11 | Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-44109 | 7.5 | Oct 11 | Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44096 | 7.5 | Oct 11 | Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-44093 | 7.5 | Oct 11 | Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-41309 | 7.5 | Sep 27 | Permission control vulnerability in the MediaPlaybackController module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-41308 | 7.5 | Sep 27 | Screenshot vulnerability in the input module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-41307 | 7.5 | Sep 27 | Memory overwriting vulnerability in the security module Affected: 2.0.0; 2.1.0; 3.0.0 |
| CVE-2023-41305 | 7.5 | Sep 27 | Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2022-48606 | 7.5 | Sep 27 | Stability-related vulnerability in the binder background management and control module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0 |
| CVE-2023-41303 | 7.5 | Sep 25 | Command injection vulnerability in the distributed file system module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-41302 | 7.5 | Sep 25 | Redirection permission verification vulnerability in the home screen module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-41301 | 7.5 | Sep 25 | Vulnerability of unauthorized API access in the PMS module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0 |
| CVE-2023-41300 | 7.5 | Sep 25 | Vulnerability of parameters not being strictly verified in the PMS module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-41293 | 7.5 | Sep 25 | Data security classification vulnerability in the DDMP module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-41299 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-41298 | 7.5 | Sep 25 | Vulnerability of permission control in the window module Affected: 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-39409 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-39408 | 7.5 | Sep 25 | DoS vulnerability in the PMS module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0 |
| CVE-2023-39406 | 7.5 | Aug 13 | Permission control vulnerability in the XLayout component Affected: 3.0.0 |
| CVE-2023-39404 | 7.5 | Aug 13 | Vulnerability of input parameter verification in certain APIs in the window management module Affected: 3.0.0; 3.1.0 |
| CVE-2023-39397 | 7.5 | Aug 13 | Input parameter verification vulnerability in the communication system Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-39395 | 7.5 | Aug 13 | Mismatch vulnerability in the serialization process in the communication system Affected: 2.0.0; 3.0.0; 3.1.0 |
| CVE-2023-39394 | 7.5 | Aug 13 | Vulnerability of API privilege escalation in the wifienhance module Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-39391 | 7.5 | Aug 13 | Vulnerability of system file information leakage in the USB Service module Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-39390 | 7.5 | Aug 13 | Vulnerability of input parameter verification in certain APIs in the window management module Affected: 3.0.0; 3.1.0 |
| CVE-2023-39386 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the PMS module Affected: 3.0.0; 3.1.0 |
| CVE-2023-39396 | 7.5 | Aug 13 | Deserialization vulnerability in the input module Affected: 3.0.0; 3.1.0 |
| CVE-2023-39393 | 7.5 | Aug 13 | Vulnerability of insecure signatures in the ServiceWifiResources module Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-39392 | 7.5 | Aug 13 | Vulnerability of insecure signatures in the OsuLogin module Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-39389 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the PMS module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39388 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the PMS module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39384 | 7.5 | Aug 13 | Vulnerability of incomplete permission verification in the input method module Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-39383 | 7.5 | Aug 13 | Vulnerability of input parameters being not strictly verified in the AMS module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39382 | 7.5 | Aug 13 | Input verification vulnerability in the audio module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39381 | 7.5 | Aug 13 | Input verification vulnerability in the storage module Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0 |
| CVE-2023-39380 | 7.5 | Aug 13 | Permission control vulnerability in the audio module Affected: 3.0.0; 3.1.0 |
| CVE-2023-37241 | 7.5 | Jul 6 | Input verification vulnerability in the WMS API Affected: 3.0.0; 3.1.0 |
| CVE-2023-37239 | 7.5 | Jul 6 | Format string vulnerability in the distributed file system Affected: 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-34164 | 7.5 | Jul 6 | Vulnerability of incomplete input parameter verification in the communication framework module Affected: 3.0.0; 3.1.0 |
| CVE-2023-1695 | 7.5 | Jul 6 | Vulnerability of failures to capture exceptions in the communication framework Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0 |
| CVE-2023-1691 | 7.5 | Jul 6 | Vulnerability of failures to capture exceptions in the communication framework Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0 |
| CVE-2022-48520 | 7.5 | Jul 6 | Unauthorized access vulnerability in the SystemUI module Affected: 2.0.0; 2.0.1 |
| CVE-2022-48519 | 7.5 | Jul 6 | Unauthorized access vulnerability in the SystemUI module Affected: 2.0.0; 2.0.1 |
The 500 most important CVEs for this product (exploited first, then by severity)
