HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,107
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 138High 362Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54627
8.8
0%
Aug 6
Out-of-bounds write vulnerability in the skia module
Affected: 5.0.1; 5.0.2
CVE-2025-48906
8.8
0%
Jun 6
Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
CVE-2021-40002
8.8
0%
Jan 10
The Bluetooth module has an out-of-bounds write vulnerability
Affected: before 2.0
CVE-2021-40000
8.8
0%
Jan 10
The Bluetooth module has an out-of-bounds write vulnerability
Affected: before 2.0
CVE-2026-49310
8.6
0%
Sep 9
Permission control vulnerability in the event notification module
Affected: 6.1.0
CVE-2021-37086
8.6
1%
Dec 7
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read…
Affected: before 2.0
CVE-2026-41964
8.4
0%
May 15
Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability
Affected: 6.1.0; 6.0.0
CVE-2021-22376
8.4
0%
Jun 30
A component of the HarmonyOS has a Improper Privilege Management vulnerability
Affected: 2.0
CVE-2025-48911
8.2
0%
Jun 6
Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.1; 5.0.2
CVE-2023-34154
8.2
0%
Jun 16
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary…
Affected: before 2.0
CVE-2026-28536
8.1
0%
Mar 5
Authentication bypass vulnerability in the device authentication module
Affected: 6.0.0; 5.1.0
CVE-2025-48905
8.1
0%
Jun 6
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types
Affected: 5.0.0
CVE-2021-37134
8.1
1%
Jan 3
Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface of location-related…
Affected: before 2.0
CVE-2021-37074
8.1
1%
Dec 8
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation
Affected: before 2.0
CVE-2025-68968
7.8
0%
Jan 14
Double free vulnerability in the multi-mode input module
Affected: 6.0.0
CVE-2025-54655
7.8
0%
Aug 6
Race condition vulnerability in the virtualization base module
Affected: 5.0.1; 5.0.2
CVE-2025-48903
7.8
0%
Jun 6
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability
Affected: 5.0.0
CVE-2021-37000
7.8
0%
Dec 28
Some Huawei wearables have a permission management vulnerability
Affected: 2.0
CVE-2024-42038
7.8
0%
Aug 8
Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and…
Affected: 3.0.0; 4.0.0; 4.2.0
CVE-2024-42035
7.8
0%
Aug 8
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality
Affected: 4.0.0; 4.2.0
CVE-2023-26547
7.8
0%
Mar 27
The InputMethod module has a vulnerability of serialization/deserialization mismatch
Affected: 2.0; 2.0.1; 2.1; 3.0.0; 3.1.0
CVE-2022-41576
7.8
0%
Oct 14
The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices
Affected: 2.0
CVE-2022-41585
7.8
0%
Oct 14
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting
Affected: 2.0; 2.1
CVE-2022-41584
7.8
0%
Oct 14
The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting
Affected: 2.0; 2.1
CVE-2022-31762
7.8
0%
Jun 13
The AMS module has a vulnerability in input validation
Affected: 2.0
CVE-2021-22470
7.8
0%
Oct 28
A component of the HarmonyOS has a Privileges Controls vulnerability
Affected: 2.0
CVE-2021-22458
7.8
0%
Oct 28
A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability
Affected: 2.0
CVE-2021-22451
7.8
0%
Oct 28
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability
Affected: 2.0
CVE-2021-22425
7.8
0%
Aug 3
A component of the HarmonyOS has a Double Free vulnerability
Affected: All versions, or not specified
CVE-2021-22423
7.8
0%
Aug 3
A component of the HarmonyOS has a Out-of-bounds Write Vulnerability
Affected: All versions, or not specified
CVE-2021-22422
7.8
0%
Aug 3
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability
Affected: 2.0
CVE-2021-22421
7.8
0%
Aug 3
A component of the HarmonyOS has a Improper Privilege Management vulnerability
Affected: 2.0
CVE-2021-22420
7.8
0%
Aug 3
A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability
Affected: 2.0
CVE-2021-22418
7.8
0%
Aug 3
A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability
Affected: 2.0
CVE-2021-22416
7.8
0%
Aug 3
A component of the HarmonyOS has a Data Processing Errors vulnerability
Affected: 2.0
CVE-2025-46588
7.7
0%
May 6
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality
Affected: 5.0.0
CVE-2023-52713
7.7
0%
Apr 7
Vulnerability of improper permission control in the window management module
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2023-52367
7.7
0%
Feb 18
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity
Affected: 2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
CVE-2025-53169
7.6
0%
Jul 7
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device…
Affected: 5.0.1; 5.1.0
CVE-2026-34856
7.5
0%
Apr 13
UAF vulnerability in the communication module
Affected: 6.0.0
CVE-2026-34853
7.5
0%
Apr 13
Permission bypass vulnerability in the LBS module
Affected: 4.3.1; 4.3.0; 4.2.0; 4.0.0
CVE-2026-28553
7.5
0%
Apr 13
Vulnerability of improper permission control in the theme setting module
Affected: 4.3.1; 4.3.0; 4.2.0; 4.0.0
CVE-2026-34851
7.5
0%
Apr 13
Race condition vulnerability in the event notification module
Affected: 5.1.0; 6.0.0
CVE-2026-28552
7.5
0%
Mar 5
Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability
Affected: 6.0.0; 5.1.0; 4.3.1; 4.3.0; 4.2.0; 4.0.0
CVE-2025-64312
7.5
0%
Nov 28
Permission control vulnerability in the file management module
Affected: 5.1.0; 5.0.1; 6.0.0
CVE-2025-54635
7.5
0%
Aug 6
Vulnerability of returning released pointers in the distributed notification service
Affected: 5.1.0
CVE-2025-54630
7.5
0%
Aug 6
:Vulnerability of insufficient data length verification in the DFA module
Affected: 4.3.0; 5.0.1
CVE-2025-54628
7.5
0%
Aug 6
Vulnerability of incomplete verification information in the communication module
Affected: 4.0.0; 4.2.0; 4.3.0; 4.3.1; 5.0.1; 5.1.0
CVE-2025-54610
7.5
0%
Aug 6
Out-of-bounds access vulnerability in the audio codec module
Affected: 5.0.1; 5.1.0
CVE-2025-54609
7.5
0%
Aug 6
Out-of-bounds access vulnerability in the audio codec module
Affected: 5.0.1; 5.1.0
Page 1 of 8 · 362 total
12…8
The 500 most important CVEs for this product (exploited first, then by severity)