Advisories · Weakness

CWE-264.

Every Advisory and CVE whose sources give the weakness CWE-264, newest first.

CVE-2026-101184 CVE record

CVSS 5.5 Medium

Permission control vulnerability in the Bluetooth module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 2 Nov 2026
CVE-2026-101177 CVE record

CVSS 3.7 Low

Permission control vulnerability in the Optimizer module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 2 Nov 2026
CVE-2026-101176 CVE record

CVSS 7.1 High

Permission control vulnerability in the event notification management module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 2 Nov 2026
CVE-2026-101171 CVE record

CVSS 3.6 Low

Permission control vulnerability in the background task management module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 2 Nov 2026
CVE-2026-101172 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the graphics module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 2 Nov 2026
CVE-2026-116367 CVE record

CVSS 5.3 Medium

DeepSeek Harness sandbox.ts createContext
- DeepSeek Harness
- CWE-264
- CWE-265
Not analysed yet 26 Oct 2026
CVE-2026-96012 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

IBM Db2 Mirror for i Privilege Escalation
- IBM Db2 Mirror for i
- CWE-264
Not analysed yet 12 Oct 2026
CVE-2026-108788 CVE record

CVSS 4.8 Medium

deepseek-ai deepseek-harness Sandbox spawn sandbox
- deepseek-ai deepseek-harness
- CWE-264
- CWE-265
Not analysed yet 12 Oct 2026
CVE-2026-76488 CVE record

CVSS 6.5 Medium

Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-264
Not analysed yet 7 Oct 2026
CVE-2026-101102 CVE record

CVSS 5.3 Medium

deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
- deepseek-ai deepseek-harness
- CWE-264
- CWE-265
Not analysed yet 28 Sept 2026
CVE-2026-76412 CVE record

CVSS 8.5 High

Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerability
- Cisco Secure Firewall Management Center (FMC)
- CWE-264
Not analysed yet 16 Sept 2026
CVE-2026-49313 CVE record

CVSS 5.5 Medium

Permission control vulnerability in the app lock module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-49309 CVE record

CVSS 4.8 Medium

Permission control vulnerability in the Settings module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-41987 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the app management module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-49315 CVE record

CVSS 7.1 High

DoS vulnerability in the input device module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-81644 CVE record

CVSS 4.3 Medium

DoS vulnerability in the preview service module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-49312 CVE record

CVSS 4.0 Medium

Permission control vulnerability in the window module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-49310 CVE record

CVSS 8.6 High

Permission control vulnerability in the event notification module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 9 Sept 2026
CVE-2026-49303 CVE record

CVSS 5.1 Medium

Permission control vulnerability in the notification module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 17 Aug 2026
CVE-2026-49308 CVE record

CVSS 5.5 Medium

Permission control vulnerability in the clipboard module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 17 Aug 2026
CVE-2026-49304 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the device key management module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 17 Aug 2026
CVE-2026-18593 CVE record

CVSS 6.3 Medium

vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
- vxcontrol PentAGI
- CWE-264
- CWE-265
Not analysed yet 3 Aug 2026
CVE-2026-58556 CVE record

CVSS 5.1 Medium

Permission control vulnerability in the Bluetooth module.
- Huawei Harmony OS
- Huawei EMUI
- CWE-264
Not analysed yet 15 Jul 2026
CVE-2026-58555 CVE record

CVSS 6.6 Medium

Permission bypass vulnerability in the card module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 15 Jul 2026
CVE-2026-14784 CVE record

CVSS 5.3 Medium

vxcontrol PentAGI Docker API client.go sandbox
- vxcontrol PentAGI
- CWE-264
- CWE-265
Not analysed yet 6 Jul 2026
CVE-2026-41974 CVE record

CVSS 3.6 Low

Permission control vulnerability in service notifications.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 9 Jun 2026
hermes-agent PyPI

CVSS 6.9 Medium

hermes-agent has a sandbox issue
- Privilege escalation
- CWE-264
<0.11.0 · fixed in 0.11.0

GHSA-wm96-9gfh-vvgq · CVE-2026-9368 Not analysed yet 26 May 2026
CVE-2026-41962 CVE record

CVSS 3.6 Low

Permission control vulnerability in the app management and control module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 15 May 2026
verl PyPI

CVSS 6.3 Medium

verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()
- Code injection
- CWE-264
<=0.7.1 · no fixed version yet

GHSA-h57c-v2v3-5v3v · CVE-2026-6878 Not analysed yet 23 Apr 2026
CVE-2026-6224 CVE record

CVSS 6.9 Medium

nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox
- nocobase plugin-workflow-javascript
- CWE-264
- CWE-265
Not analysed yet 13 Apr 2026
CVE-2026-6117 CVE record

CVSS 5.3 Medium

AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
- AstrBot
- CWE-264
- CWE-265
Not analysed yet 12 Apr 2026
CVE-2026-20046 CVE record

CVSS 8.8 High

Cisco IOS XR Software CLI Privilege Escalation Vulnerability
- Cisco IOS XR Software
- CWE-264
Not analysed yet 11 Mar 2026
CVE-2026-28541 CVE record

CVSS 4.0 Medium

Permission control vulnerability in the cellular_data module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 5 Mar 2026
CVE-2025-66319 CVE record

CVSS 3.3 Low

Permission control vulnerability in the resource scheduling module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 5 Mar 2026
CVE-2026-24924 CVE record

CVSS 6.1 Medium

Vulnerability of improper permission control in the print module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 6 Feb 2026
CVE-2026-24920 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the AMS module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 6 Feb 2026
CVE-2026-24931 CVE record

CVSS 5.9 Medium

Vulnerability of improper criterion security check in the card module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 6 Feb 2026
CVE-2026-24923 CVE record

CVSS 6.3 Medium

Permission control vulnerability in the HDC module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 6 Feb 2026
CVE-2025-68967 CVE record

CVSS 5.7 Medium

Vulnerability of improper permission control in the print module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 14 Jan 2026
CVE-2025-66329 CVE record

CVSS 4.0 Medium

Permission control vulnerability in the window management module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 8 Dec 2025
CVE-2025-66325 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the package management module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 8 Dec 2025
CVE-2025-58302 CVE record

CVSS 8.4 High

Permission control vulnerability in the Settings module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 28 Nov 2025
CVE-2025-58294 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the print module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 28 Nov 2025
CVE-2025-58315 CVE record

CVSS 5.5 Medium

Permission control vulnerability in the Wi-Fi module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 28 Nov 2025
CVE-2025-58312 CVE record

CVSS 5.1 Medium

Permission control vulnerability in the App Lock module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 28 Nov 2025
CVE-2025-58309 CVE record

CVSS 6.8 Medium

Permission control vulnerability in the startup recovery module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 28 Nov 2025
CVE-2025-64315 CVE record

CVSS 4.4 Medium

Configuration defect vulnerability in the file management module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 28 Nov 2025
CVE-2025-58293 CVE record

CVSS 5.5 Medium

Vulnerability of improper exception handling in the print module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 11 Oct 2025
CVE-2025-58285 CVE record

CVSS 5.3 Medium

Permission control vulnerability in the media module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 11 Oct 2025
CVE-2025-58284 CVE record

CVSS 5.9 Medium

Permission control vulnerability in the network module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 11 Oct 2025
CVE-2025-58283 CVE record

CVSS 5.5 Medium

Permission control vulnerability in the Wi-Fi module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 11 Oct 2025
CVE-2025-58282 CVE record

CVSS 2.8 Low

Permission control vulnerability in the camera module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 11 Oct 2025
CVE-2025-54654 CVE record

CVSS 6.2 Medium

Permission control vulnerability in the Gallery module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 11 Oct 2025
CVE-2025-58276 CVE record

CVSS 6.8 Medium

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 5 Sept 2025
CVE-2025-54608 CVE record

CVSS 6.2 Medium

Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 6 Aug 2025
CVE-2025-53186 CVE record

CVSS 5.9 Medium

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 7 Jul 2025
CVE-2025-53178 CVE record

CVSS 4.8 Medium

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 7 Jul 2025
CVE-2025-53177 CVE record

CVSS 3.9 Low

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-264
Not analysed yet 7 Jul 2025
CVE-2025-5874 CVE record

CVSS 2.1 Low

Redash getattr python.py run_query sandbox
- Redash
- CWE-264
- CWE-265
Not analysed yet 9 Jun 2025
CVE-2025-48903 CVE record

CVSS 7.8 High

Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-264
Not analysed yet 6 Jun 2025