OP
Product
OpenHarmony
by OpenHarmony · last CVE May 19, 2026
170
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 62Medium 93Low 10
Watch

Add OpenHarmony to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39831
6.7
0%
Oct 8
AccessTokenManager has an use after free vulnerability
Affected: v4.0.0 through 4.1.0
CVE-2026-28733
6.5
0%
May 19
filemanagement_storage_service has an use after free vulnerability
Affected: v5.0.3 through v6.0
CVE-2025-12736
6.5
0%
Mar 16
multimedia_audio_standard has an insecure storage of sensitive information vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2022-43451
6.5
0%
Nov 3
Multiple path traversal in appspawn and nwebspawn services.
Affected: 3.1.0
CVE-2024-21863
6.2
0%
Feb 2
Dsoftbus has an improper input validation vulnerability
Affected: v3.2.0 through v3.2.4; v4.0.0 before v4.0.1
CVE-2026-27766
5.5
0%
May 19
multimedia_audio_framework has a Race Condition vulnerability
Affected: v5.0.3 through v6.0
CVE-2026-25850
5.5
0%
May 19
filemanagement_storage_service has an improper preservation of permissions vulnerability
Affected: v5.0.3 through v6.0
CVE-2025-6969
5.5
0%
Mar 16
ability_ability_runtime an improper input validation vulnerability
Affected: v5.0.3 through v5.1.0.x
CVE-2026-0639
5.5
0%
Mar 16
liteos_a has a missing release of memory vulnerability
Affected: v5.0.3 through v6.0
CVE-2025-27562
5.5
0%
Aug 11
communication_dsoftbus has a missing release of memory vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2025-25212
5.5
0%
Aug 11
pasteboard has an improper input vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2025-24844
5.5
0%
Aug 11
communication_dsoftbus has a missing release of memory vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2025-27536
5.5
0%
Aug 11
arkcompiler_ets_runtime has a type confusion vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2025-26690
5.5
0%
Aug 11
communication dsoftbus has a NULL pointer vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2025-24925
5.5
0%
Aug 11
applications_settings has a missing release of memory vulnerability
Affected: v5.0.3 through v5.0.3.x
CVE-2025-27247
5.5
0%
Jun 8
Pasteboard has an improper preservation of permissions vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-27242
5.5
0%
Jun 8
Ssecurity_component_manager has an improper input vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-27563
5.5
0%
Jun 8
security_access_token has an improper preservation of permissions vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-26693
5.5
0%
Jun 8
security_access_token has an improper preservation of permissions vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-26691
5.5
0%
Jun 8
telephony_call_manager has an improper preservation of permissions vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-27131
5.5
0%
Jun 8
kernel_liteos_m has an improper input vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-25217
5.5
0%
Jun 8
arkui_ace_enginehas a NULL pointer dereference vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-23235
5.5
0%
Jun 8
arkcompiler_ets_runtime has an out-of-bounds write vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-21082
5.5
0%
Jun 8
arkui_ace_engine has a type confusion vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-20063
5.5
0%
Jun 8
arkui_ace_engine has a type confusion vulnerability
Affected: v5.0.1 through v5.0.3
CVE-2025-25052
5.5
0%
May 6
arkcompiler_ets_runtime has a buffer overflow vulnerability
Affected: v4.1.0 through v5.0.3
CVE-2025-27241
5.5
0%
May 6
multimedia_av_codec has a NULL pointer dereference vulnerability
Affected: v4.1.0 through v5.0.3
CVE-2025-27248
5.5
0%
May 6
ai_neural_network_runtime has a NULL pointer dereference vulnerability
Affected: v4.1.0 through v5.0.3
CVE-2025-22886
5.5
0%
May 6
distributeddatamgr_udmf has a memory leak vulnerability
Affected: v4.1.0 through v5.0.3
CVE-2025-25218
5.5
0%
May 6
third_party_mksh has a NULL pointer dereference vulnerability
Affected: v4.1.0 through v5.0.3
CVE-2025-27534
5.5
0%
Apr 7
arkcompiler_ets_runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-25057
5.5
0%
Apr 7
third_party_NuttX has a memory leak vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-24304
5.5
0%
Apr 7
arkcompiler_ets_runtime has an out-of-bounds write vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22842
5.5
0%
Apr 7
arkcompiler_ets_runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22452
5.5
0%
Apr 7
arkcompiler_ets_runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-20102
5.5
0%
Apr 7
arkcompiler_ets_runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-23418
5.5
0%
Mar 4
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-23234
5.5
0%
Mar 4
Arkcompiler Ets Runtime has a buffer overflow vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22897
5.5
0%
Mar 4
Arkcompiler Ets Runtime has a buffer overflow vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22847
5.5
0%
Mar 4
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22841
5.5
0%
Mar 4
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22837
5.5
0%
Mar 4
Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-22443
5.5
0%
Mar 4
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-21098
5.5
0%
Mar 4
Liteos-A has an insecure storage of sensitive information vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-21097
5.5
0%
Mar 4
Arkcompiler Ets Runtime has a NULL pointer dereference vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-21089
5.5
0%
Mar 4
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-20042
5.5
0%
Mar 4
Liteos-A has an out of bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-20021
5.5
0%
Mar 4
Arkcompiler Ets Runtime has an out-of-bounds read vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-20011
5.5
0%
Mar 4
Communication Dsoftbus has a memory leak vulnerability
Affected: v4.1.0 through v5.0.2
CVE-2025-0302
5.5
0%
Feb 7
Liteos_a has an integer overflow read vulnerability
Affected: v4.1.0 through 4.1.2
Page 1 of 2 · 93 total