HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-44108
7.5
0%
Oct 11
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44111
7.5
0%
Oct 11
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44104
7.5
0%
Oct 11
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44103
7.5
0%
Oct 11
Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 4.0.0
CVE-2023-44101
7.5
0%
Oct 11
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality
Affected: 2.0.0; 2.1.0; 3.1.0; 4.0.0
CVE-2023-44100
7.5
0%
Oct 11
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44097
7.5
0%
Oct 11
Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.1; 3.0.0
CVE-2023-44095
7.5
0%
Oct 11
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-44109
7.5
0%
Oct 11
Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44096
7.5
0%
Oct 11
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-44093
7.5
0%
Oct 11
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 2.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-41309
7.5
1%
Sep 27
Permission control vulnerability in the MediaPlaybackController module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-41308
7.5
1%
Sep 27
Screenshot vulnerability in the input module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-41307
7.5
1%
Sep 27
Memory overwriting vulnerability in the security module
Affected: 2.0.0; 2.1.0; 3.0.0
CVE-2023-41305
7.5
0%
Sep 27
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2022-48606
7.5
0%
Sep 27
Stability-related vulnerability in the binder background management and control module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0
CVE-2023-41303
7.5
1%
Sep 25
Command injection vulnerability in the distributed file system module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-41302
7.5
1%
Sep 25
Redirection permission verification vulnerability in the home screen module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-41301
7.5
0%
Sep 25
Vulnerability of unauthorized API access in the PMS module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0
CVE-2023-41300
7.5
0%
Sep 25
Vulnerability of parameters not being strictly verified in the PMS module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-41293
7.5
0%
Sep 25
Data security classification vulnerability in the DDMP module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-41299
7.5
0%
Sep 25
DoS vulnerability in the PMS module
Affected: 3.0.0; 3.1.0; 4.0.0
CVE-2023-41298
7.5
0%
Sep 25
Vulnerability of permission control in the window module
Affected: 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-39409
7.5
0%
Sep 25
DoS vulnerability in the PMS module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-39408
7.5
0%
Sep 25
DoS vulnerability in the PMS module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0; 4.0.0
CVE-2023-39406
7.5
0%
Aug 13
Permission control vulnerability in the XLayout component
Affected: 3.0.0
CVE-2023-39404
7.5
0%
Aug 13
Vulnerability of input parameter verification in certain APIs in the window management module
Affected: 3.0.0; 3.1.0
CVE-2023-39397
7.5
0%
Aug 13
Input parameter verification vulnerability in the communication system
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-39395
7.5
0%
Aug 13
Mismatch vulnerability in the serialization process in the communication system
Affected: 2.0.0; 3.0.0; 3.1.0
CVE-2023-39394
7.5
0%
Aug 13
Vulnerability of API privilege escalation in the wifienhance module
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-39391
7.5
0%
Aug 13
Vulnerability of system file information leakage in the USB Service module
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0
CVE-2023-39390
7.5
0%
Aug 13
Vulnerability of input parameter verification in certain APIs in the window management module
Affected: 3.0.0; 3.1.0
CVE-2023-39386
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the PMS module
Affected: 3.0.0; 3.1.0
CVE-2023-39396
7.5
0%
Aug 13
Deserialization vulnerability in the input module
Affected: 3.0.0; 3.1.0
CVE-2023-39393
7.5
0%
Aug 13
Vulnerability of insecure signatures in the ServiceWifiResources module
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-39392
7.5
0%
Aug 13
Vulnerability of insecure signatures in the OsuLogin module
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-39389
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the PMS module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39388
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the PMS module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39384
7.5
0%
Aug 13
Vulnerability of incomplete permission verification in the input method module
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-39383
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the AMS module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39382
7.5
0%
Aug 13
Input verification vulnerability in the audio module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39381
7.5
0%
Aug 13
Input verification vulnerability in the storage module
Affected: 2.0.0; 2.0.1; 2.1.0; 3.0.0; 3.1.0
CVE-2023-39380
7.5
0%
Aug 13
Permission control vulnerability in the audio module
Affected: 3.0.0; 3.1.0
CVE-2023-37241
7.5
0%
Jul 6
Input verification vulnerability in the WMS API
Affected: 3.0.0; 3.1.0
CVE-2023-37239
7.5
0%
Jul 6
Format string vulnerability in the distributed file system
Affected: 2.0.1; 3.0.0; 3.1.0
CVE-2023-34164
7.5
0%
Jul 6
Vulnerability of incomplete input parameter verification in the communication framework module
Affected: 3.0.0; 3.1.0
CVE-2023-1695
7.5
0%
Jul 6
Vulnerability of failures to capture exceptions in the communication framework
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0
CVE-2023-1691
7.5
0%
Jul 6
Vulnerability of failures to capture exceptions in the communication framework
Affected: 2.0.0; 2.0.1; 3.0.0; 3.1.0
CVE-2022-48520
7.5
0%
Jul 6
Unauthorized access vulnerability in the SystemUI module
Affected: 2.0.0; 2.0.1
CVE-2022-48519
7.5
0%
Jul 6
Unauthorized access vulnerability in the SystemUI module
Affected: 2.0.0; 2.0.1
Page 8 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)